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SECTION  1 


INTRODUCTION  AND  SUMMARY 


PROGRAM  OBJECTIVE 

The  U.S.  Air  Force  current! y  loses  about  75  fighter,  trainer,  and  attack 
aircraft  each  year  in  major  accidents.  Each  aircraft  crash  is  investigated  to 
determine  the  cause.  The  provision  of  a  crash  survivable  flight  data  recorder 
(CSFDR)  system  that  provides  data  for  that  investigation  would  improve  rhe 
investigation  effectiveness  such  that  actions  could  be  taken  resulting  from 
the  findings  to  prevent  reoccurrence.  If  this  should  reduce  the  number  of 
future  accidents  even  by  a  few  percent,  the  consequent  cost  savings  would  be 
substantial.  There  has  been  therefore  a  requirement  for  the  investigation  of 
the  installation  of  a  CSFDR  system  into  those  aircraft  types. 

Current  CSFDR  systems  were  designed  for  the  commercial  aircraft  field 
and  are  too  bulky  and  heavy  to  be  considered  for  these  high-density  aircraft. 

With  recent  improvements  in  techno  log',,  particularly  crash  protection  tech¬ 
niques,  data  storage,  and  data  processing  and  compression,  it  is  possible  to 
build  systems  that  are  considerably  lighter  and  smaller  than  previously  designed. 

Accordingly,  this  program  has  been  undertaken  to  attempt  to  provide  the 
U.S.  Air  Force  with  information  adequate  to  determine  whether  a  CSFDR  develop¬ 
ment  program  should  be  begun.  Specific  questions  to  be  answered  include: 

•  Performance  requirements  for  a  CSFDR 

•  Technology  advances  appropriate  tq  a  modern  CSFDR  design 

•  Size,  weight,  and  life-cycle  cost  penalties  of  a  CSFDR 

•  Expected  system  benefits  and  benefit/cost  ratio 

•  Required  detailed  technological  developments  that  could  be  under¬ 
taken  to  improve  the  benefit/penalty  performance 

Although  the  program  undertaken  by  A i Research,  together  with  Normalair- 
Garrett  Limited  (NGL)  as  co investigator,  has  been  modest  in  funded  scope  of 
effort,  the  essential  program  objectives  have  been  met.  The  provision  of  CSFDR 
systems  for  these  aircraft  would  be  hignly  cost  effective,  and  development  can 
and  should  begin  now  in  order  to  minimize  losses  of  aircraft  and  lives. 

PROGRAM  METHODS  OVERVIEW 

The  organization  of  the  study  has  proceeded  essentially  as  outl'ned  in  the 
A iResearch-NGL  proposal  and  is  shown  in  Figure  1-1.  The  sequence  has  been  as 
fol lows: 

•  Obtain  data  to  define  system  reaui cements 

•  Evolve  consensus  requirement  set 
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Figure  1-1.  Overview  of  CSFOR  Study  Program 
Methods  and  Procedures 


•  Review  avai lable  technology 

•  Develop  configurations  to  apply  this  technology  to  the  requirements 

•  Develop  potential  benefits  and  costs 

The  initial  task  obtained  a  substantial  data  base  from  which  to  develop 
system  requirements.  Accident  investigation  authorities  were  interviewed, 
including  military  program  and  safety  offices,  civilian  aviation  safety 
authorities,  and  aircraft  manufacturers,  both  in  the  U.S.  and  in  Europe. 

Reports  on  these  interviews  are  included  in  Appendix  G. 

The  data  base  was  next  resolved  into  actual  system  capability  requirements. 
An  analytic  procedure  was  developed,  which  resulted  in  a  we  I  I -substant i ated 
list  of  priorities  for  those  parameters  that  should  be  stored.  Less  unanimity 
was  evident  in  the  matter  of  data  sampling  rates,  and  a  major  program  effort 
was  expended  to  compare  data  compression  algorithms  and  to  evolve  a  technique 
that  would  minimize  the  data  storage  size  requirement  without  sacrificing 
the  ability  to  follow  aircraft  and  system  dynamics.  The  requirements  for 
survivability  were  also  reviewed  in  an  attempt  to  determine  the  relevance  of 
transport  aircraft  digital  flight  data  recorder  (DFDR)  system  survivability 
specifications  to  the  CSFDR  problem  for  fighter  aircraft. 

The  technology  review  was  relatively  conventional  in  all  but  two  aspects — 
survivability  and  data  storage.  Testing  was  accomplished  for  certain  data 
store  protection  techniques.  Data  storage  technology  was  evaluated,  with 
emphasis  on  high-density  magnetic  tape  and  the  emerging  el ectr i ca I  I y-a I terabl e 
sol i d- state  dev  ices. 

System  configurations  were  developed  to  satisfy  the  range  of  CSFDR  system 
requirements.  These  included  the  three  alternative  configurations  specified 
in  the  program  statement  of  work,  as  well  as  some  further  alternatives  that 
could  not  be  definitively  resolved  by  the  contractor.  No  effort  was  made  to 
design  exotic  device  or  packaging  technology  into  the  data  acquisition  and 
processing  segment  of  the  system;  costs,  including  ma i nta i nebi I ty  costs,  were 
the  controlling  factor  in  this  segment.  However,  in  the  data  storage  element, 
some  technology  push  is  assumed  in  order  to  minimize  size  and  weight  of  the 
protection  subsystem  and  the  weight  and  balance  impact  of  the  data  storage 
modu le. 

Estimates  were  made  of  system  acquisition  and  other  cost  elements  relevant 
to  the  life-cycle  cost.  An  estimate  was  also  made  of  the  potential  and  pre¬ 
dicted  savings,  based  on  recent  accident  history  and  probable  improvements  in 
resolution  of  accident  causes. 

SUMMARY  OF  CONCLUSIONS 

Parameter  Selection  and  Sampling  Rates 

The  table  of  selected  parameters  and  sampling  rates  from  Section  3  is 
shown  here  as  Table  1-1.  The  sampling  rates  are  designed  to  keep  successive 
samples  within  the  accuracy  band  for  most  aircraft  operations,  with  some 
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TABLE  1-1 


PARAMETER  PRIORITIES  ACCURACY  AND 
SAMPLING  RATE  REQUIREMENTS 


Max.  Rate 

Requ ired 

Samp  1 i ng 

Word 

of  Change, 

Accuracy, 

Rate, 

Length , 

percent  per  sec 

percent 

per  sec 

bit 

A i r speed 

4 

1 

2 

1 1 

Al titude 

1 .6 

0.125 

8 

12 

Normal  Load  Factor 

100 

0.6 

16 

9 

Eng i ne  rpn  N2 

20 

2 

1 

8 

Elevator  Position 

100 

4 

8 

7 

A i 1 eron  Pos i t ion 

100 

4 

8 

7 

Rudder  Position 

200 

4 

8 

7 

Flap  Position 

6 

1 

6 

Engine  Fuel  Flow 

20 

2 

1 

8 

Head i nq 

17 

0.5 

8 

10 

Pitch  Attitude 

17 

0.5 

3 

10 

dank  Ang 1 e 

100 

0.5 

16 

10 

Engine  E3T 

50 

2 

2 

8 

Engine  rpn  Nj 

20 

2 

1 

3 

Hydraul ic  Pressure 

10 

1 

6 

Generator 

10 

1 

6 

Angle  of  Attack 

100 

1 

16 

9 

Master  Caution* 

Di scretes 

— 

1 

2  x  16 

Yaw  Rate 

17 

2 

4 

8 

Pitch  Trim 

20 

5 

1 

7 

Lateral  Acceleration 

2 

8 

8 

Power  Lever  Angle 

100 

2 

1 

8 

1 nverter 

10 

1 

6 

Fuel  Quantity 

0.1 

5 

1  per  30  sec 

7 

Radar  Altitude 

25 

0. 1 

16 

1  1 

Lead i nq  Edge  F 1 aps 

100 

5 

1 

7 

? i tch  Rata 

100 

2 

8 

8 

Rol 1  Rate 

400 

2 

16 

8 

Longitudinal  Acceleration 

2 

8 

8 

Engine  Oil  Pressure 

10 

1 

6 

Stick  Position 

100 

4 

3 

7 

Cabin  Pressure 

10 

1 

6 

Outside  Air  Temperature 

1 

1 

8 

Rudder  Pedal  Position 

200 

4 

8 

7 

Sink  Rate 

50 

2 

8 

8 

NOTE: 


Master  caution  words  to  include  auto  pilot, 
cautionary  discretes. 


speed  brake,  and  a  I  I 
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granularity  allowed  in  signal  resolution  of  maximum  rates.  In  accordance  with 
the  primary  concerns  of  most  investigative  personnel,  the  parameter  selection 
proved  to  contain  data  that  primarily  defines:  (1)  the  trajectory  of  the  air¬ 
craft,  (2)  the  orientation  and  motion  of  the  aircraft,  (3)  the  response  of  the 
aircraft  and  engines  to  primary  control  inputs,  and  (4)  some  system  character¬ 
istics. 

The  input  sampling  data  rate  to  the  processing  unit  is  approximately 
1800  bit/sec  for  configuration  I  and  900  bit/sec  for  conf iguration  II. 

Data  Compression  Algorithm  and  Storage  Capacity 


Data  compression  was  a  major  task  in  the  program.  The  desire  to  conceive 
a  system  that  would  be  compatible  with  a  solid-state  data  store  of  practical 
size  requires  the  use  of  data  compression  to  minimize  storage  requ i rements . 

For  example,  the  conf iguration  I  data  rate  of  1800  bit/sec  would  result  in 
approxi mate  I y  3-Mbit  storage  requirement  for  a  half-hour  of  uncompressed  data. 


The  presently  preferred  algorithm  is  a  comparatively  simple  form  of  delta 
coding.  Sample  tests  indicate  a  range  of  4  to  10  in  available  compression 
ratio  from  this  algorithm,  depending  upon  aircraft  dynamics.  It  is  note¬ 
worthy  that  this  algorithm  is  fully  reversible;  i.e.,  the  complete  set  of 
input  data  can  be  recovered  from  the  stored  information. 

Addition  of  audio  data,  even  for  only  10  min  of  the  flight,  adds  substan¬ 
tially  to  the  storage  requ i rements.  For  the  minimum  bit  rate  expected  to 
reproduce  reasonable  quality  voice  and  cockpit  sounds,  an  added  3  Mbit  is 
requ i red . 

If  a  maintenance  capability  is  added  to  the  optimum  configuration  this  adds 
to  the  storage  requirement  a  further  memory  between  1  Mbit  and  20  Mbit,  dependent 
on  the  flight  duration,  degree  of  onboard  processing,  and  form  of  maintenance 
recording  undertaken.  These  results  are  summarized  in  Table  1-2. 

Standard i zat ion 


The  study  confirmed  the  existence  of  sufficient  commonality  between  the 
three  primary  aircraft,  the  A-10,  F— 15,  and  F— 16,  to  enable  the  development 
of  a  system  that  would  be  common  to  a  I  I  three.  In  some  cases,  there  would  be 
a  few  unused  inputs.  Also,  there  would  be  some  software  modules  not  identical 
between  the  three  aircraft,  with  programming  pins  to  tell  the  system  which 
of  the  included  programs  to  run. 


The  situation  is  more  complex  if  tri -service  standardization  is  required. 
In  particular,  if  the  U.S.  Air  Force  does  not  require  audio  data  and  the  U.S. 
Navy  does,  then  the  storage  modules  may  not  be  common,  and  an  added  circuit 
module  would  be  required  in  the  U.S.  Navy  data  processing  unit. 

Storage  Technology 


The 
tape  and 


basic  conclusions  of 
E^PRQM  semiconductor 


the  storage  media  investigation  are  that 
devices  are  the  valid  contenders,  with  a 


magnet i c 
deci si  on 
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TABLE  1-2 


CSFDR  STORAGE  CAPACITY  REQUIREMENTS 


System 

Capacity  Requirement 

Configuration  II,  parametric  data  only 

160  Kbit 

Configuration  1,  parametric  data  only 

500  Kbit 

Configuration  1,  data  and  audio  (10  min) 

3  Mbit 

Configuration  1,  data  and  audio  (15  min) 

4  Mbit 

Maintenance  storage  low  requirement 

2  Mbit* 

Maintenance  storage  medium 

6  Mbit* 

Maintenance  storage  high 


*Each  of  these  in  addition  to  the  selected  crash  data 


16 


Mbit* 


between  the  two  based  on  memory  size  and  required  operational  dates.  In 
particular,  the  ability  to  build  a  semiconductor  memory  at  an  acceptable  cost 
that  will  survive  the  crash  environment  with  acceptable  data  integrity  has  yet 
to  be  demonstrated.  This  situation  is  summarized  in  Table  1-3  for  a  range  of 
decision  dates  for  the  range  of  capacities  given  above  in  Table  1-2. 


TABLE  1-3 


STORAGE  TECHNOLOGY  SELECTION  POSSIBILITIES 


Storage  Capacity 
Requ i red 

March  1981 

Nov  1981 

Aug  1983 

160  Kbit 

Tape 

Sol  id-state 
or  tape 

Sol  id-state 
or  tape 

500  Kbit 

Tape 

Sol  id- state 
or  tape 

Sol  id- state 
or  tape 

3  Mbit 

Tape 

Tape 

Sol  id- state 
or  tape 

6  Mbit 

Tape 

Tape 

Sol  id-state 
or  tape 

16  Mbit 

Tape 

Tape 

Tape 
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RECOMMENDED  FOLLOW-ON  TASKS 


As  a  result  of  the  study  and  consideration  of  the  requirements  for  follow- 
work,  the  following  is  a  recommendation  for  specific  areas  of  work  that  should 
be  carried  out  prior  to  award  of  the  full-scale  development  contract. 

•  Evaluate  the  technology  risk  involved  in  utilizing  solid-state 
memory  by  using  development  hardware  to  assess  the  performance  in 
the  required  operational  and  crash  environments  and  their  effects 
on  the  data  integrity. 

•  Investigate  in  more  depth  the  degree  of  information  to  be  obtained 
for  accident  investigation  from  audio  recording  including  the  use 
of  free-area  microphones. 

•  Further  evaluate  compression  techniques  using  real  aircraft  data 

to  determine  the  practical  degree  of  compression,  the  applicability 
of  entropy  encoding,  and  methods  using  the  interrelationship  of 
parameters . 

•  Evaluate  in  detail  the  requirements  for  tri-service  standardization, 
and  define  the  impact  upon  system  requirements. 

At  this  time,  it  is  recommended  that  any  full-scale  development  program 
should  develop  a  storage  module  interface  that  would  enable  utilizing  either  a 
tape  recorder  or  a  solid-state  solution;  this  recommendation  is  due  to  the 
undemonstrated  capability,  cost,  and  availability  of  nonvolatile  solid-state 
memories.  This  recommendation  could  change  as  a  result  of  the  evaluations 
recommended  above. 

TASK  FLOW  DIAGRAMS  REFERENCING 

The  proposal  for  this  CSFDR  study  contained  flow  charts  for  the  tasks  to 
be  performed.  These  flow  charts  are  re-presented  in  this  section  showing  the 
results  of  the  study  and  reference  to  the  report  section  that  details  the  work 
carried  out  (see  Figures  1-2  through  1-7). 
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Figure  1-5.  Task  IV 
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MANUALS 
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SECTION  2 


NEED  FOR  PROGRAM 


The  Limited  States  Air  Force  loses  approximately  three  squadrons  of 
aircraft  each  year  due  to  accidents.  The  information  from  this  study  indicates 
that  10  percent  of  these  accidents  could  be  prevented  if  more  timely  and  pre¬ 
cise  definition  of  the  cause  of  each  accident  were  available. 

The  National  Transportation  Safety  Board  (NTSB)  states  in  Safety  Recommen¬ 
dations  A-78-27  through  A-78-29,  "Accidents  investigation  experience  with  air 
carrier  aircraft  has  proven  that  cockpit  voice  recorders  and  flight  data 
recorders  have  been  invaluable  tools  in  identifying  aircraft  design  deficien¬ 
cies,  common  operational  problems,  shortcomings  in  air  traffic  control  systems, 
and  the  effects  of  meteorological  phenomena  on  aircraft  performance".  The  same 
safety  documents  cite  194  fatal  accidents  of  air  taxi  and  corporate/executive 
operations,  with  the  cause  undetermined  in  34  cases. 

A  spokesman  for  the  United  Kinqdom  Ministry  of  Defense,  Inspecmrate  of 
Flight  Safety,  stated  that  in  18  Jaguar  aircraft  losses  the  cause  was  unknown 
for  9,  although  it  was  thought  that  in  most  cases  the  cause  was  due  to  failure 
of  the  navigation  equipment.  This  spokesman  felt  that  25  percent  of  these 
losses  could  have  been  prevented  if  a  crash  survivable  flight  data  recorder 
(CSFDR)  had  been  onboard  the  aircraft.  He  also  felt  that  the  need  for  a  CSFDR 
was  great  for  military  aircraft  of  the  future,  since  electrical  control  system 
failures  and  integrated  displays  do  not  leave  evidence  within  the  wreckage  to 
help  determine  the  cause  of  the  accident.  Although  no  statistics  are  available 
for  aircraft  of  this  type,  the  complexity  of  aircraft  has  progressively 
increased  over  the  years.  Statistics  of  Navy/Marine  aircraft  destroyed  in 
major  accidents  from  1975  through  August  1980  show  a  distinct  trend  (see  Table 
2-1).  The  percentage  of  aircraft  crashes  in  which  the  cause  is  not  determined 
appears  to  be  increasing  in  later  years.  Statistics  for  aircraft  lost  in  water 
have  not  been  included  as  the  recoverabi I i ty  of  the  aircraft  could  influence 
the  results. 

TABLE  2-1 


NAVY/MARINE  AIRCRAFT  CRASH  STATISTICS 


Year 

1975 

1976 

1977 

1978 

1979 

1980 

Aircraft  lost  on  land 

52 

50 

n 

53 

55 

41 

Number  where  cause  is  determined 

51 

46 

43 

47 

34 

Percentage  where  cause  not  determined 

1  .9 

8 

n 

18 

14.5 

17 

If  a  CSFDR  were  fitted  to  an  aircraft  that  crashed  and  the  data  were 
available  to  the  investigation  board,  it  is  expected  that  the  cost  of  the 
investigation  would  be  reduced  and  confidence  in  the  determination  of  the  cause 
would  be  increased. 
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This  recorded  data  can  show  deficiencies  in  pitot  training  methods, 
operational  procedures,  or  limitations  within  the  aircraft  design,  which  if 
corrected  could  prevent  recurrence  of  similar  accidents.  Without  the  avail¬ 
ability  of  the  recorded  data,  these  deficiencies  might  not  be  discovered;  this 
means  that  other  accidents  from  the  same  primary  cause  are  a  possibility.  A 
qualified  authority  in  Europe  states  that  there  is  usually  more  than  one  con¬ 
tributing  factor  in  most  accidents.  He  also  stated  that  it  is  potentially 
damaging  to  the  reputation  of  the  airline  if  more  than  one  accident  occurs 
and  the  cause  is  determined  to  be  of  the  same  origin. 

Details  of  818  USAF  accidents  involving  fighter  attack  and  training  air¬ 
craft  since  1976  were  obtained  from  Norton  AFB.  An  analysis  of  these  details 
indicate  that  in  21.5  percent  of  the  Class  A  accidents  the  cause  was  not 
determined,  and  in  21.5  percent  of  the  other  cases,  the  report  was  inconclusive 
as  to  the  cause. 
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SECTION  3 


DEVELOPMENT  OF  SYSTEM  REQUIREMENTS 


In  order  to  define  the  requirements  for  an  optimum  crash  survivable  flight 
data  recorder  (CSFDR)  system  to  assist  with  accident  investigation,  data  from 
authorities  in  this  field  were  compiled  and  evaluated.  This  information 
included  optimum  information  that  should  be  recorded,  the  required  accuracies, 
recording  duration,  and  the  memory  module  survival  requirements. 

The  following  paragraphs  define  the  design  requirements  for  CSFDR  system 
and  include  the  rationale  for  the  selection  of  these  requirements. 

PARAMETER  PRIORITIES 


Lists  of  parameters  considered  potentially  critical  in  determining  the 
cause  of  an  accident  were  obtained  from  several  qualified  agencies,  both 
in  North  America  and  in  Europe.  To  enable  a  priority  to  be  placed  on  the 
possible  parameters  to  be  recorded,  the  parameters  contained  in  each  list  are 
given  a  priority  number.  This  number  was  chosen  by  consideration  of  the 
relevance  to  the  aircraft  being  considered  in  this  study,  and  by  the  priority 
placed  on  the  parameter  within  the  list  by  each  agency. 

Table  3-1  details  the  source  of  each  list,  the  aircraft  category  for  which 
the  list  was  prepared,  and  the  priority  numbers  that  have  been  placed  on  those 
parameters.  Figure  3-1  gives  a  histogram  for  the  candidate  parameters.  This 
enables  these  parameters  to  be  placed  in  order  of  priority  so  that  the  importance 
of  each  parameter  may  be  assessed  when  preparing  a  particular  aircraft  installa¬ 
tion. 

It  should  be  noted  that  for  specific  aircraft,  certain  parameters  could 
have  particular  significance  for  accident  investigation  purposes.  This 
cannot  be  shown  in  a  generalized  list. 


The  primary  objective  of  this  study  is  to  determine  if  a  CSFDR  system  is 
cost  effective  for  fighter,  attack,  and  training  aircraft.  Of  the  six  lists 
(which  can  be  found  in  Appendix  A),  two  are  concerned  with  commercial  and  gen¬ 
eral  aviation  requirements  and  consequently  have  been  given  the  lowest  priority 
number.  The  parameter  list  for  the  F-18A  is  given  the  next  priority,  even 
though  it  is  a  fighter/attack  aircraft.  This  list  was  prepared  with  the 
mode  of  operation,  often  from  a  carrier  base,  taken  into  consideration.  The 
other  lists  were  prepared  for  aircraft  of  the  types 
this  study.  All  have  been  given  a  similar  priority 


to  be  investigated 
rat i ng . 


for 
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LANDING  GEAR 


Figure  3-1.  Parameter  Priorities 
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The  Civil  Aviation  Authority  directive  for  fitment  of  a  CSFDR  states  that 
the  objective  in  the  selection  of  parameters  is  to  obtain  the  following 
information : 

(a)  The  flight  path  of  the  aircraft 

(b)  The  attitude  of  the  aircraft  in  achieving  that  flight  path 

(c)  The  basic  forces  acting  upon  the  aircraft  and  resulting  in  achieved 
flight  path,  such  as  lift,  drag,  thrust,  control  forces 

(d)  The  general  origin  of  the  basic  forces  and  influences,  such  as  naviga¬ 
tion  information  and  aircraft  system  status  information 

In  addition  to  this  data,  which  will  enable  a  three-dimensional  flight  path 
of  the  aircraft  to  be  produced,  information  is  required  to  enable  determination 
of  the  area  in  which  any  problem  originates.  This  requires  the  storage  of  the 
following  information: 

(a)  States  of  major  aircraft  systems 

(b)  Events  contributing  to  the  aircraft  forces 

(c)  The  environmental  conditions  present  at  the  time 


Although  Figure  3-1  provides  an  idea  with  respect  to  preparation  of  the 
parameter  list  for  a  particular  aircraft,  the  requirements  listed  above  should 
not  be  neglected,  especially  if  the  aircraft  has  an  unusual  control  configuration. 


Audio  Record inc 


One  of  the  tasks  undertaken  as  part  of  this  study  was  to  evaluate  the 
importance  and  impact  of  adding  the  recording  of  audio  to  the  CSFDR  system. 

All  of  the  personnel  surveyed  during  this  study  were  questioned  on  their  opinion 
about  the  recording  of  audio  for  accident  investigation  purposes.  The  consensus 
was  that  for  a  single-seat  aircraft  the  recording  of  audio,  although  useful, 
was  not  a  maximum  priority. 


The  United  Kingdom  accident  investigation  branch  felt  that  a  "hot  mike" 
audio  input  should  be  recorded  to  pick  up  other  audible  sounds  within  the  cock¬ 
pit  in  addition  to  as  the  pilots  communications  inputs.  A  representative  of 
the  United  Kingdom  Inspectorate  of  Flight  Safety  mentioned  that  the  audio 
recording  of  the  two  Tornados  that  crashed  was  extremely  useful  in  determina¬ 
tion  of  the  cause. 


If  solid-state  storage  is  to  be  used  for  recording  of  audio  information, 
the  audio  must  be  digitized  prior  to  storage.  The  recording  of  audio,  using 
even  the  latest  available  compression  technology  with  silence  editing  (see 
Section  4),  requires  a  memory  size  of  about  2.5  Mbits  to  store  the  last  10  min. 
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At  this  time  and  for  this  application,  the  additional  cost  of  adding  the 
memory  and  compression  circuitry  does  not  appear  to  be  justified  if  a  solid- 
state  storage  module  is  utilized.  This  could  be  modified  by  the  findings  of 
a  more  detailed  investigation  into  the  usefulness  of  audio  or  if  tri-service 
standardization  is  required. 

It  is  possible  that  the  future  availability  of  vocoders,  which  will  allow 
a  higher  compression,  together  with  the  increased  packing  density  of  future 
memory  chips  could  change  this  situation. 

PARAMETER  CHARACTER  I  ST  I CS 

Most  of  the  agencies  contacted  were  surveyed  on  their  views  of  parameter 
sampling  rates  and  accuracies  required  for  accident  investigation  purposes  on 
fighter,  attack,  and  training  aircraft.  John  Sturgeon  of  the  Royal  Aircraft 
Establishment  at  Farnborough,  engineering  advisor  to  United  Kingdon  Civil 
Aviation  Authority  and  The  Royal  Air  Force  on  flight  data  recorders,  provided 
the  only  definitive  information,  which  is  included  in  Appendix  A. 

Information  is  available  for  commercial  aircraft  requ i rements,  but 
the  sampling  rates  need  to  be  increased  for  the  more  maneuverable  aircraft 
being  considered.  Details  of  the  maximum  rates  of  change  to  be  expected  for 
each  parameter  on  the  three  aircraft  types  being  studied  are  included  in 
Table  3-2.  From  these  maximum  rates  of  change  and  the  required  accuracy,  an 
estimate  was  made  for  the  sampling  rates  that  compares  closely  with  those  sub¬ 
mitted  by  John  Sturgeon  (see  Appendix  B).  Norton  AFISC/SESD  stated  each 
parameter  should  be  accurate  enough  to  monitor  normal  instrument  fluctuations. 

NTSB  recommendations  A-78-27  through  A-78-29  provide  accuracy  requirements 
for  the  recommended  parameters.  With  these  guidelines,  the  accuracy  for  each 
parameter  was  determined.  The  NTSB  recommendation  also  includes  a  minimum 
resolution  requirement. 

Using  the  maximum  rates  of  change,  which  could  be  present  under  crash 
conditions,  the  sampling  rates  were  determined.  These  were  selected  so 
that  under  normal  operating  rates  of  change,  the  parameter  profile  could 
be  determined  within  the  accuracy  required.  Figure  3-2  shows  a  typical  method 
of  determining  the  parameter  profile. 

The  discussions  with  accident  investigation  personnel  indicated  that  in  the 
majority  of  accidents,  the  data  from  the  5  min  prior  to  crash  contained  the  most 
critical  information  and  should,  if  possible,  be  stored  uncompressed  or  stored 
in  such  a  way  that  the  data  is  completely  reconstructab le.  It  is  probable  that 
during  the  last  few  minutes  prior  to  crash  at  least  one,  if  not  more,  of  the 
parameters  will  be  changing  at  a  rate  approaching  maximum. 

During  this  critical  period,  the  equipment  providing  the  signals  of  the 
important  parameters  is  required  to  be  fully  operational  and  should  not  be  shed 
if  load  shedding  is  necessary.  Additionally,  equipment  that  would  not  be  essen¬ 
tial  for  flight  but  would  provide  important  signals  to  the  CSFDR  will  be  required 
to  change  to  flight  essential. 
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TABLE  3-2 


PARAMETER  PRIORITIES  ACCURACY  AND 
SAMPLING  RATE  REQUIREMENTS 


Max.  Rate 

Requ  i  red 

Samp  1 i ng 

Word 

of  Change, 

Accuracy, 

Rate,  per 

Length, 

percent  per  sec 

percent 

sec  ^ 

bi  t 

A i rspeed 

4 

1 

2 

11 

Altitude 

1 .6 

0.125 

8 

12 

Normal  Load  Factor 

100 

0.6 

16 

9 

Engine  rpm  N2 

20 

2 

1 

8 

E levator  Pos i t i cn 

100 

4 

8 

7 

A i  1 eron  Pos i t ion 

100 

4 

8 

7 

Rudder  Position 

200 

4 

8 

7 

Flap  Position 

6 

1 

6 

Engine  Fuel  Flow 

20 

2 

1 

8 

Head i ng 

17 

0.5 

8 

10 

Pitch  Attitude 

17 

0.5 

8 

10 

Bank  Angle 

100 

0.5 

16 

10 

Engine  Egt 

50 

2 

2 

8 

Engine  rpm  N-| 

20 

2 

1 

8 

Hydrau 1 ic  Pressure 

10 

1 

6 

Generator 

10 

1 

6 

Angle  of  Attack 

100 

1 

16 

9 

Master  Caution* 

Discretes 

__ 

1 

2  x  16 

Yaw  Rate 

17 

2 

4 

8 

Pitch  Trim 

20 

5 

1 

7 

Lateral  Acceleration 

2 

8 

8 

Power  Lever  Angle 

100 

2 

1 

8 

1  river  ter 

10 

1 

6 

Fuel  Quantity 

0.1 

5 

1  per  16  sec 

7 

Radar  A  1 ti tude 

25 

0.1 

16 

11 

Leading  Edge  Flaps 

100 

5 

1 

7 

Pitch  Rate 

100 

2 

8 

8 

Rol 1  Rate 

400 

2 

16 

8 

Longitudinal  Acceleration 

2 

8 

8 

Engine  Oil  Pressure 

10 

1 

Stick  Position 

100 

4 

8 

7 

Cabin  Pressure 

10 

1 

6 

Outside  Air  Temperature 

1 

1 

8 

Rudder  Pedal  Position 

200 

4 

8 

7 

S i nk  Rate 

50 

2 

8 

8 

*Elapsed  time  count  included  within  stored  data. 

NOTE:  Master  caution  words  to  include  auto  pilot,  speed  brake,  and  all 
cautionary  discretes. 
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•  MAX  RATE  OF  CHANGE  OF  BANK  ANGLE  315°  PER  SEC 

•  MAX  RATE  OF  CHANGE  OF  ROLL  RATE  1146°  PER  SEC2 
OR  143°  PER  SEC  IN  1/8  SEC 


BANK 

ANGLE 


A  12781 


Figure  3-2.  Derivation  of  Sampling  Rate  for  Bank  Any,e 


If  an  aircraft  carrying  a  CSFDR  system  crashes  in  hostile  territory, 
it  is  possible  that  information  contained  within  the  stored  data  could  be 
analyzed  to  determine  the  operational  performance  and  tactical  information. 

Data  encryption  devices  are  available  from  more  than  one  source,  thereby  making 
it  possible  to  scramble  the  data  during  the  record  process  while  still  being 
able  to  replay  that  data  if  the  scrambling  code  is  known. 

RECORD  DURATION  AND  SPECIFIC  EVENTS  REQUIRING  STORAGE 

The  views  expressed  by  the  different  accident  investigation  organ i zations 
and  other  personnel  involved  with  accident  investigation  differ  widely  with 
respect  to  the  minimum  memory  duration  required  for  a  CSFDR.  The  shortest  time 
duration  considered  necessary  is  10  min;  the  longest  is  the  maximum  duration 
for  one  complete  flight  of  the  aircraft  concerned. 

The  main  arguments  made  for  the  longer  duration  are  that  confidence  can  be 
gained  with  respect  to  the  functional  status  and  calibration  of  each  of  the 
signal  inputs  to  the  system.  This  is  primarily  achieved  by  checking  the  excur¬ 
sions  of  the  parameters  during  the  previous  landing  and  takeoff.  If  the  CSFDR 
system  is  organized  such  as  to  store  data  from  the  preflight  control  exercising 
and  the  takeoff,  the  majority  of  experts  accepted  that  15  to  30  min  of  memory 
duration  would  be  adequate.  Some  considered  that  if  the  system  also  carried 
out  a  maintenance  function,  and  if  the  maintenance  storage  module  were  removed 
after  each  flight,  then  the  storage  of  the  preflight  and  takeoff  data  would  not 
be  necessary. 
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The  graph  shown  in  Figure  3-3  depicts  an  accident  recording  time  distribu¬ 
tion,  obtained  during  the  course  of  this  study.  To  ensure  its  validity  a 
copy  was  sent  to  NTSB.  Their  reply  is  included  in  Appendix  I,  which  makes  the 
case  for  recording  of  the  takeoff  and  landing  prior  to  the  accident,  and  should 
include  exercising  of  the  controls.  In  this  case  only  10  to  15  min  of  the 
last  data  are  considered  sufficient. 

CRASH  SURVIVAL  REQUIREMENTS 

If  a  CSFDR  system  is  fitted  to  an  aircraft  it  is  the  prime  requisite  that 
the  data  storage  module  survives  the  accident,  such  that  the  data  can  be 
extracted  and  analyzed. 

The  majority  of  current  crash  protected  recorders  utilize  magnetic  tape 
recorders  contained  within  an  enclosure  that  is  crash  hardened  to  meet  the 
requirements  of  TS0C51a.  This  requirement  was  prepared  for  recorders  installed 
in  commercial  aircraft.  For  this  application,  with  aircraft  that  are  consider¬ 
ably  faster  and  contain  less  fuel,  the  requirement  could  be  too  stringent  in 
some  areas  and  not  stringent  enough  in  others. 


Figure  3-3.  Accident  Recording  Time  Distribtuion  (Data 
From  National  Transportat ion  Safety  Board) 
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Contact  was  made  with  Dr.  Thomson  of  the  Impact  Dynamics  Research  Facility 
at  Langley,  Virginia.  Dr.  Thomson  has  extrapolated  results  obtained  from 
civilian  crashes,  taking  into  account  details  of  a  typical  fighter  aircraft 
structure,  to  obtain  an  estimate  of  the  maximum  shock  to  be  experienced  by  any 
equipment  fitted  in  a  fighter  that  crashes.  He  estimates  the  shock  to  be  a 
maximum  of  1000  g  with  a  duration  of  35  ms.  He  expects  the  shock  to  be  a  tri¬ 
angular  waveform  with  linear  rise  and  fall  and  a  rise  time  of  between  20  and  80 
percent  of  the  duration.  This  compares  to  the  TS0C51(a)  requirement  of  1000  g 
for  a  5-ms  half  sinewave. 

The  department  run  by  Dr.  John  Parker  at  NASA  AMES  Moffat  Field  has 
carried  out  tests  with  fuel  fires  such  that  an  estimate  can  be  made  of  the 
temperatures  and  duration  of  fires  resulting  from  an  aircraft  crash.  Joseph 
Mansfield  within  this  department  quoted  the  following  details: 

Temperatures  measured  above  a  pool  fire 


at 

4.7 

ft 

1 300°C 

at 

9.4 

ft 

1360°C 

at 

18.8 

ft 

1400°C 

1/4  in.  depth  of  fuel  will  burn  in  1  min  on  a  flat  surface.  Fuel  flowing  at 
150  gallons  per  minute  will  produce  a  f i re  of  18  ft  radius,  600  gallons  per 
minute  35  ft  radius,  2400  gallons  per  minute  70  ft  radius.  For  the  aircraft 
being  considered  the  maximum  fuel  carried  without  external  tanks  is  less  than 
1800  gallons.  If  this  leaks  at  a  rate  of  150  gallons  per  minute  it  will  pro¬ 
duce  a  fire  lasting  for  just  over  12  min.  If  there  is  a  severe  impact,  fuel 
is  likely  to  leak  at  a  higher  rate  than  this.  If  the  impact  causes  a  lower 
fuel  leakage  rate  the  radius  of  the  fire  will  be  smaller  and  will  probably  not 
engulf  the  tail  of  the  aircraft  where  the  storage  module  is  expected  to  be 
i nsta I  I ed . 

Even  if  the  storage  medium  is  crash  hardened  it  is  advisable  to  install  it 
within  the  aircraft  in  a  position  where  the  crash  conditions  are  likely  to  be 

least  severe  and  where  the  unit  is  most  likely  to  be  easily  recovered  from  the 

wreckage.  It  is  universally  accepted  that  the  tail  section  of  the  aircraft 
more  frequently  survives  an  aircraft  crash  than  any  other  section.  All  of  the 
personnel  contacted  during  the  course  of  this  study  recommend  installation  as 
far  aft  as  possible,  away  from  the  fuel  tanks  and  not  in  front  or  close  to  any 

heavy  structure  or  objects  such  as  engines.  This  is  likely  to  ease  the  recovery 

of  the  storage  module  from  the  wreckage. 

The  alternative  to  crash  hardening  the  storage  module  such  that  it  will 
survive  an  aircraft  crash  is  to  ensure  that  the  module  does  not  end  up  in  the 
crash  or  any  resultant  fire.  In  an  attempt  to  achieve  this,  several  different 
types  of  ejectable  or  deployable  modules  have  been  produced  over  the  years. 

The  only  systems  that  claim  any  degree  of  success  use  one  of  two  basic  methods: 
either  pyrotechnic  means  of  ejection  or  the  aerodynamic  properties  of  an 
airfoi I . 
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Due  to  the  obvious  danger  associated  with  pyrotechnic  systems  this  can  be 
disregarded  unless  the  storage  module  were  attached  to  the  pilot's  ejection 
seat.  This  would  present  an  optimum  solution  if  it  were  certain  the  pilot 
would  or  could  eject  prior  to  the  crash.  Out  of  818  U.S.  Air  Force  fighter 
attack  and  trainer  aircraft  involved  in  accidents  since  1976,  325  aircraft 
were  lost  and  in  only  192  cases  did  the  pilot  eject. 

The  airfoil  system  theoretically  deploys  on  impact  such  that  its  aero¬ 
dynamic  properties  cause  it  to  fly  away  from  the  immediate  crash  area.  The 
drawbacks  of  this  type  of  system  are:  (1)  there  is  a  high  cost  of  developing 
an  airfoil  for  each  aircraft  type;  (2)  modification  of  the  aircraft  structure 
would  be  required  to  fit  the  airfoil;  (3)  there  is  a  possibility  of  inadvertent 
deployment;  (4)  and  when  deployed  the  storage  module  could  still  end  up  in  the 
crash  area,  particularly  in  a  fire  area. 

Present  airfoil  design  is  such  that  the  device  will  float  in  water. 
Deployment  in  general  is  initiated  by  frangible  switches  that  break  as  soon  as 
the  aircraft  structure  is  deformed.  In  addition,  a  crash  position  indicator 
is  fitted  within  the  airfoil. 

The  location  and  recovery  of  an  aircraft  that  crashes  into  water  is 
extremely  difficult  and  expensive.  If  the  crashed  aircraft  contained  a  CSFDR, 
the  protected  memory  module  would  require  to  be  found  and  retrieved.  This 
would  be  difficult  unless  the  memory  module  were  within  an  airfoil  that  was 
dep loyed . 

Only  if  a  large  proportion  of  crashes  occur  in  water  does  this  become  a 
viable  solution.  Of  the  818  accidents  analyzed,  less  than  6.2  percent  crashed 
in  water.  For  this  reason,  the  use  of  a  deployable  memory  module  is  not 
recommended.  However,  consideration  should  be  given  to  the  installation  of  an 
underwater  locator  beacon,  to  aid  with  the  location  of  the  crash  protected 
memory  module.  Due  to  the  cost  and  weight  of  such  devices,  and  to  the  low  pro¬ 
portion  of  aircraft  that  crash  into  water,  such  devices  are  not  considered 
generally  warranted. 

LOGISTIC  CONSIDERATIONS 

A  CSFDR  system  provided  for  aircraft  accident  investigation  purposes  will 
hopefully  never  be  used  on  that  particular  aircraft,  since  it  is  provided 
only  to  make  information  available  about  a  flight  in  which  there  was  an 
incident  or  accident,  to  assist  with  determination  of  the  cause.  It  is  impor¬ 
tant  that  the  system  be  fully  functional  if  this  incident  or  accident  occurs. 
Built-in  test  can  provide  a  limited  degree  of  confidence  that  the  system  is 
functioning.  The  failure  of  an  individual  signal  source,  not  utilized  and 
checked  by  other  aircraft  equipment,  could  remain  undetected  unless  periodic 
checks  are  made  on  the  total  CSFDR  system  including  the  signal  sources. 

It  is  possible  for  the  processor  to  detect  if  any  of  the  signals  has 
deviated  outside  its  normal  range  where  there  is  a  dircet  interrelationship 
between  two  or  more  parameters  so  that  between  rudder  pedal  position  and 
rudder  position  any  discrepancy  can  be  flagged.  For  parameters  such  as  the 
discretes  and  hydraulic  pressures,  no  practical  method  of  determining  if  the 
sensor  has  failed  is  available. 
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It  is  not  practical  to  carry  out  periodic  calibration  checks  on  each 
parameter,  except  possibly  during  a  major  aircraft  maintenance  check.  If  a 
periodic  replay  is  made  of  data  stored  during  a  flight,  and  the  stored  data 
includes  the  pretakeoff  checks  and  takeoff  data  together  with  the  last  landing, 
analysis  of  the  data  should  indicate  if  any  parameter  is  not  functioning  cor¬ 
rectly. 

With  the  use  of  a  solid-state  storage  medium,  where  the  memory  can  deterio¬ 
rate  with  the  number  of  erase/write  cycles,  it  is  necessary  to  check  the  integ¬ 
rity  of  the  store  per iod i ca I  I y .  With  the  Intel  store,  this  is  possible  by 
carrying  out  a  soft  erase  and  then  reading  the  data  still  contained  in  the 
store. 


Since  the  crash  protected  storage  module  is  likely  to  be  positioned  in  a 
relatively  inaccessible  location  in  the  aircraft,  periodic  review  of  the  data 
would  make  it  necessary  to  milk  that  module  in  place.  As  part  of  the  life- 
cycle  costing,  the  provision  of  flight  line  test  units  at  each  of  the  aircraft 
locations  has  been  included.  These  flight  line  test  units  will  enable  a 
qualitative  check  on  the  memory  module  to  be  carried  out.  Each  will  contain 
a  cartridge  memory  onto  which  the  storage  module  can  be  milked,  with  provision 
to  input  header  data  for  the  particular  aircraft  and  date.  Each  cartridge 
will  have  the  capacity  to  accept  data  from  several  aircraft. 


It  is  assumed  that  the  analysis  of 
the  CSFDR  system  will  be  carried  out  at 
ure  isolation  and  repair  for  all  except 
to  be  carried  out  at  the  same  facilities 
provisioned. 


the  data  to  ensure  correct  operation  of 
intermediate  repair  facilities.  Fail- 
the  processor  circuit  card  is  assumed 
,  and  stand-alone  test  units  will  be 


STANDARDIZATION 


One  of  the  objectives  of  this  study  was  to  determine  both  the  requirements 
and  potential  for  standard ization  on  a  CSFDR  system.  Standardization  was  to  be 
investigated  for  tri-service  application  for  all  aircraft  types  with  a  similar 
basic  function  as  well  as  for  different  functional  aircraft  types.  The  primary 
objective  was  to  produce  an  optimum  configuration  applicable  for  all  USAF 
fighter,  training,  and  attack  aircraft  and  then  to  determine  the  impact  on  that 
configuration  for  tri-service  applications  and  for  bomber  and  transport  air¬ 
craft. 

The  major  differences  to  be  encountered  from  one  aircraft  type  to  another 
that  have  the  same  basic  functions  lie  in  the  available  signal  sources  for  each 
of  the  parameters  forming  part  of  the  basic  requirement.  Provision  has  been 
made  within  the  proposed  design  to  accommodate  these  variations  (see  Section  6). 


For  the  tri-service  application,  the  requirements  and  basic  differences 
in  operation  and  aircraft  type  have  to  be  considered,  together  with  any 
specific  requirements  of  each  service.  A  large  proportion  of  the  U.S.  Navy 
flights  are  carried  out  over  water.  Of  557  aircraft  lost  between  1975  and 
mid-1980,  45  percent  were  lost  in  water.  In  consequence  they  require  that  the 
da+a  storage  module  for  the  CSFDR  be  deployable  and  also  contain  a  crash  posi¬ 
tion  indicator  (CPI).  This  is  to  ensure  both  that  the  position  of  the  wreckage 
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is  identified  and  the  recording  can  be  recovered  without  the  high  cost  of 
recovery  from  the  wreckage. 


The  U.S.  Navy  also  include  the  requirement  that  audio  from  the  pilot’s 
communications  system  should  be  stored.  To  accommodate  these  requirements 
if  not  fitted,  a  separate  storage  module  could  be  utilized  for  the  audio, 
and  both  this  module  and  the  module  provisioned  for  data  could  be  fitted 
within  a  deployable  airfoil.  Space  provision  could  he  made  for  fitment  of 
the  single  circuit  card  required  to  condition  and  compress  the  audio  data 
within  the  processing  unit.  When  vocoders  and  the  higher  capacity  storage 
chips  are  available,  it  would  be  practable  to  provision  two  identical  storage 
modules,  one  for  audio  and  one  for  the  digital  data.  Alternatively,  if  the 
storage  module  were  developed  to  have  adequate  capacity  for  audio,  both  could 
be  incorporated  in  a  common  store. 

The  majority  of  U.S.  Army  aircraft  are  helicopters.  A  CSFDR  system  tor 
helicopter  applications  would  require  the  recording  of  different  parameters. 
These  parameters  are  likely  to  be  monitored  by  transducers  or  equipment  produc¬ 
ing  signals  with  the  same  basic  ranges  as  those  considered  for  this  program, 
and  the  required  sampling  rates  are  likely  to  be  of  the  same  order.  To  accom¬ 
modate  this  within  the  system  will  require  at  least  the  change  of  system 
firmware. 

For  use  with  bomber  and  transport  aircraft  there  are  several  considera¬ 
tions  to  be  taken  into  account: 

(a)  In  general,  bomber  and  transport  aircraft  have  four  engines.  Even 
to  store  the  same  parameter  information  as  for  fighters  and  attack 
aircraft,  the  number  of  parameters  to  condition  from  the  engines 
will  be  doubled.  This  would  require  one  additional  circuit  card. 

(b)  Due  to  the  flight  duration  of  these  aircraft  and  the  possibility 
that  a  problem  with  an  engine  could  contribute  to  the  cause  of  an 
accident  even  though  it  happened  some  time  before,  the  duration  of 
recording  required  is  considerably  longer. 

(c)  The  sampling  rates  determined  for  some  of  the  flight  profile  and 
flight  control  parameters  for  a  fighter/attack  aircraft  are  likely 
to  give  a  higher  than  necessary  resolution  if  utilized  on  a  bomber- 
transport  aircraft. 

From  the  above,  it  is  not  considered  cost-effective  to  have  one  CSFDR 
sysTen.  tailored  for  both  applications,  although  the  basic  design  of  the  acqui¬ 
sition  system  modules  could  remain  the  same. 

MAINTENANCE  RECORDING 

All  of  the  personnel  responsible  for  maintenance  recording  and  collection 
of  data  for  performance  work,  as  well  as  the  airframe  manufacturers  consulted, 
considered  it  would  be  advantageous  if  the  CSFDR  system  included  any  required 
maintenance  recording  function.  For  configuration  III  (see  Section  6),  the 
study  objective  is  to  evaluate  the  impact  on  the  design  of  adding  parameters 
associated  with  structural  integrity,  turbine  engine  health,  and  flight  control 
mon i tor i ng . 
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There  are  several  programs  sponsored  or  carried  out  by  the  USAF  that 
require  some  f»_rm  of  data  acquisition  and  recording,  each  wi  in  c.  different 
objective.  There  are  programs  concerned  with  engine  health  and  performance, 
with  the  objective  to  improve  system  support  costs  and  aircraft  operational 
availability.  Other  programs  are  concerned  with  obtaining  information  relating 
to  fracture  mechanics,  structural  strength  requirements  for  future  aircraft, 
and  the  Aircraft  Structural  Integrity  Program  (ASIP). 

Included  in  the  parameter  list  table  derived  for  the  CSFDR  (see  Table  3-2) 
are  many  of  the  parameters  necessary  to  be  processed  and  recorded  for  the  above 
functions.  The  numbers  and  types  of  additional  parameters  required  to  be 
processed  depend  to  a  large  extent  on  the  aircraft  configuration,  engine  type, 
and  the  depth  of  maintenance  to  be  undertaken.  The  size  of  the  storage  module 
required  for  maintenance  data  also  depends  on  this  and  to  a  large  extent  upon 
the  degree  and  type  of  data  compression  to  be  undertaken. 

Currently,  the  U.S.  Air  Force  is  evaluating  a  turbine  engine  maintenance 
system  (TEMS)  fitted  to  the  A-10  aircraft.  This  system  processes  13  parameters 
from  each  engine  and  7  airframe  inputs.  The  degree  of  data  compression  is  suci. 
that  only  relevant  information  is  stored  and  an  8  kbit  store  is  adequate.  To 
accommodate  this  type  of  system  within  the  configuration  I  approach  would 
involve  the  addition  of  one  circuit  card  for  the  additional  signal  interface  and 
conversion  and  a  nonvolatile  memory  chip  that  could  store  data  for  post-flight 
analysis.  The  TEMS  system  has  a  suitcase  display  to  detail  required  maintenance 
actions.  This  would  also  have  to  be  included  with  the  system  and  could  incor¬ 
porate  the  capability  to  transfer  and  evaluate  crash  data  on  a  periodic  basis, 
as  discussed  above. 

Another  program  carried  out  over  the  last  few  years  for  the  F— 101  engine  is 
central  integrated  test  subsystem  evaluation  (CITSE).  In  this,  the  parameters 
to  be  processed  and  recorded  include  those  for  engine  performance  trending  and 
failure  prediction.  The  parameter  list  is  included  in  Appendix  D  and  includes 
approximately  55  analog  parameters  per  engine  and  20  discretes.  To  include  the 
capability  to  add  this  to  a  CSFDR  would  impose  a  large  weight  and  size  penalty 
to  the  basic  CSFDR  processing  unit.  If  it  were  intended  that  every  system 
fitted  would  contain  both  functions  this  would  almost  certainly  be  the  cost- 
effective  solution.  This  is  thought  unlikely  to  occur  and  therefore  it  is 
recommended  that  any  CITSE  requirement  would  be  met  with  a  separate  system. 

Many  other  engine  health  monitoring  systems  with  various  degrees  of  com¬ 
plexity  have  been  suggested  and  in  some  cases  developed.  The  large  majority 
of  these  systems  utilize  a  tape  transport  as  the  storage  module  and  only 
process  approximately  12  additional  parameters  for  each  engine  over  those 
required  for  the  CSFDR  system. 

In  addition  to  the  parameters  included  within  those  considered  necessary 
for  a  CSFDR  system,  aircraft  flight  control  monitoring  is  likely  to  require 
to  record  or  monitor  on  I y  a  limited  number  of  parameters.  These  will  to  a 
large  extent  depend  upon  the  particular  aircraft  flight  control  systems.  When 
signals  are  to  be  monitored  from  any  of  the  flight  control  systems,  particular 
attention  will  be  required  with  respect  to  the  isolation  of  that  signal  source 
to  prevent  interference  or  cross  coupling. 
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For  the  aircraft  structural  integrity  program  (AS  IP),  very  few  of  the 
parameters  are  not  within  the  parameter  list  for  the  CSFDR  system.  The  data 
is  currently  recorded  at  a  rate  of  1920  bits  per  second  with  240  words  of  8 
bits.  No  data  compression  is  carried  out  on  the  airborne  equipment.  This 
would  then  require  a  storage  capacity  of  approximately  14  Mbits  for  a  2-hr 
flight.  With  the  processing  capability  anticipated  for  the  CSFDR  system, 
it  is  expected  to  carry  out  some  compression  on  the  data. 

From  the  above  it  can  be  seen  that  there  is  no  definitive  specification 
with  respect  to  the  required  storage  capacity,  processing  capability,  or  signal 
conditioning  for  the  addition  of  a  maintenance  recording  function. 

A  median  number  of  30  additional  parameters  to  be  processed  and  a  tape 
transport  that  can  store  up  to  13  Mbits  of  data  with  an  extremely  low  error 
rate,  necessary  if  data  compression  is  utilized,  would  be  expected  to  be 
representative  of  most  combinations  likely  to  be  required. 

SUMMARY  OF  SYSTEM  REQUIREMENTS 

The  rationale  in  the  production  of  the  pr ior i tization  of  the  parameter 
lists  is  given  in  Parameter  Priorities  (Section  3).  The  sampling  rates  and 
word  lengths  considered  necessary  to  provide  the  accuracy  and  resolution 
required  for  accident  investigation  are  given  in  Table  3-2. 

For  Configuration  I,  which  is  required  to  record  the  maximum  number  of 
flight  parameters,  it  is  preferable  to  process  and  store  all  of  the  parameters 
listed.  Some  of  these  parameters  have  a  higher  priority  for  accident  investiga¬ 
tion  than  others.  When  preparing  the  installation  design  for  a  particular 
aircraft,  the  priority  of  each  parameter  should  be  taken  into  account  when 
the  parameter  cannot  be  recorded  without  installing  a  new  transducer. 

All  those  parameters  listed  down  to  pitch  trim  (shown  in  Figure  3-1) 
should  always  be  made  available  for  processing  and  storage  and  those  below 
depend  upon  their  relative  cost  and  priority. 

For  some  of  the  three  aircraft  to  be  taken  as  representative  for  this 
study,  certain  of  the  parameters  contained  within  the  parameter  listing  are  not 
available,  while  other  signals  from  which  the  same  information  can  be  obtained 
are  available.  In  the  case  of  pitch  rate  and  roll  rate,  it  is  possible  to 
obtain  this  information  from  the  pitch  attitude  and  bank  angle  data.  In  the 
case  where  the  rate  signals  are  not  available,  the  sampling  rate,  would  be 
increased  for  the  two  attitude  parameters  such  that  the  rate  information  can 
be  computed  with  sufficient  accuracy  and  resolution.  This  would  in  turn  have 
advantages  when  delta  encoding  and  compression  are  used,  since  under  normal 
flight  conditions  a  higher  compression  would  be  possible. 

For  the  A— 1 0  the  normal  load  factor  and  lateral  and  longitudinal  accelera¬ 
tion  signals  are  not  available;  however,  the  X,  Y,  and  Z  velocities  are  present 
on  the  1553  data  bus.  In  this  case,  these  signals  would  be  recorded  instead. 
Where  a  fuel  quantity  signal  is  not  available  and  the  bingo  discrete  is  present, 
this  will  be  recorded. 
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Parameter  lists  with  details  of  those  parameters  where  it  is  recommended 
to  install  transducers  for  configuration  I  are  given  in  Tables  3-3  through 
3-5  for  each  of  the  three  aircraft  being  considered. 

From  Record  Duration  and  Specific  Events  Requiring  Storage  (Section  3), 
the  required  storage  duration  is  a  minimum  of  15  min  if  the  preflight  data  is 
recorded,  giving  some  degree  of  confidence  in  the  integrity  of  each  signal 
stored.  Although  the  information  directly  pertaining  to  an  accident  will  be 
contained  within  this  15  min  of  stored  data,  most  of  the  investigation  authori¬ 
ties  expressed  a  desire  to  have  recorded  some  prior  data,  to  enable  an  assess¬ 
ment  of  the  way  in  which  the  aircraft  was  handling  before  the  onset  of  problems. 
For  this  reason,  a  storage  duration  of  30  min  is  recommended,  in  addition  to 
the  storage  of  preflight  information. 

The  determination  to  include  the  recording  of  audio  depends  to  a  large 
extent  upon  the  type  of  memory  module  to  be  utilized  and  its  cost  in  terms  of 
both  size  and  price.  Opinion  is  divided  as  to  the  degree  of  information  obtain¬ 
able  from  audio,  if  it  were  decided  that  the  memory  module  for  data  would  be  a 
tape  recorder,  the  additional  cost  of  recording  audio  would  be  sufficiently  low 
to  warrant  its  inclusion. 

In  general,  the  European  accident  investigation  agencies  are  in  favor  of 
recording  cockpit  audio  in  addition  to  the  pilots  voice  communication.  The 
British  Accident  Investigation  Branch  utilize  the  cockpit  audio  with  spectrum 
analysis  to  indicate  operation  of  switches  and  actuators. 

For  the  type  of  aircraft  being  considered  with  the  high-ambient  noise 
level,  additional  evalution  is  required  prior  to  making  any  decision  as  to 
whether  this  should  be  included  as  a  requirement. 

Tri-Service  Considerations 

If  either  of  the  configurations  I  or  I  I  are  to  be  produced  for  installation 
by  the  three  services,  the  basic  requirement  could  be  modified. 

The  Naval  requirements  include  both  deployability  of  tne  storage  module 
and  audio.  To  be  applicable  for  tri-service  use,  the  data  acquisition  and  pro¬ 
cessing  unit  would  be  the  same  but  include  space  provision  for  an  audio  circuit 
module  unless  required  for  general  use.  Only  the  audio  circuit  module  and 
exchange  of  the  firmware  module  would  be  required  to  make  that  unit  applicable 
for  Naval  use.  The  memory  module  could  then  be  installed  in  an  airfoil  instead 
of  within  a  crash  hardened  container. 

The  configuration  I  requirement  for  a  data  acquisition  and  processing  unit 
has  the  following  minimum  signal  input  capability: 

Synchros  9 

Dc  Inputs  10 
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TABLE  3-3 


A- 10  PARAMETERS  FOR  CONFIGURATION  I 


Signal  Type 

Word  Length 

Samp  1 i ng  Rate 

Airspeed 

1553 

11 

2 

Altitude 

1553 

12 

8 

Velocity  Y 

1553 

9 

16 

Engine  rpm  N2 

0  to  5  v 

8 

1 

Elevator  position 

New  transducer 

7 

8 

A i 1 eron  pos i t i on 

New  transducer 

7 

8 

Rudder  pos !t ion 

New  transducer 

7 

8 

Flap  position 

0  to  1  v 

6 

1 

Engine  fuel  flow 

- 

8 

1 

Heading 

1553 

10 

8 

Pitch  attitude 

1553 

10 

16 

Bank  angle 

1553 

10 

32 

Interturbine  temperature 

20  to  40  mv 

8 

2 

Engine  rpm  N| 

Tacho 

8 

1 

Hydraul ic  pressure 

Synchro 

6 

1 

Generator 

- 

6 

1 

Angle  of  attack 

1553 

9 

16 

Master  caution 

- 

16  x  2 

1 

Velocity,  Z 

1553 

8 

8 

Power  1  ever  ang  1  e 

New  synchro  (TEMS) 

8 

1 

Inverter 

- 

6 

1 

Radar  altitude 

1553 

11 

16 

Oil  pressure 

Synchro 

6 

1 

Outside  air  temperature 

1553 

8 

1 

Speed  brake 

7 

4 

APU  rpm 

0  to  1  v 

8 

1 

APU  EGT 

0  to  1  v 

8 

1 
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TABLE  3-4 


F- 15  PARAMETERS  FOR  CONFIGURATION 


*These  are  only  on  20  percent  of  aircraft,  but  wiring  is  available. 
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TABLE  3-5 

F- 16  PARAMETERS  FOR  CONFIGURATION  I 


Par ameter 

Source 

m 

Samp  1 i nq 
Rate, 
per  sec 

Remarks 

Airspeed 

1553 

1 1 

2 

A 1 1 i tude 

1553 

12 

8 

Normal  load  factor 

1553 

9 

16 

Eng i ne  r pm  No 

0  to  5  vdc 

8 

1 

Elevator  position 

LVDT* 

7 

8 

F 1 aperon  position 

LVDT  * 

7 

3 

Rudder  position 

LVDT* 

7 

8 

Engine  fuel  flow 

Synchro 

8 

1 

Head i ng 

1553 

10 

8 

Pitch  attitude 

1553 

10 

16 

Bank  angle 

1553 

10 

16 

Eng ine  FT  1 T 

Dc 

8 

2 

Planned  Mod 

Eng ine  rpm  Ni 

Tachometer 

8 

1 

Hydraulic  pressure  X2 

Synchro 

6 

1 

Generator  X2 

MIL-STD-704 

6 

1 

Angle  of  attack 

1553 

9 

16 

Master  caution 

Di screte 

16  x  2 

1 

Yaw  rate 

1553 

8 

4 

Pitch  trim 

Lateral  acceleration 

1553 

8 

8 

Power  lever  angle 

Pot  0  to  10  v* 

8 

1 

Inverter  X4 

Fuel  quantity 

0  to  5  vdc 

7 

1  every 

Radar  altitude 

1553 

11 

30  sec 

16 

Leading  edge  flaps 

0  to  10  vdc 

7 

1 

Pitch  rate 

1553 

8 

8 

Rol 1  rate 

1553 

8 

16 

Longitudinal  acceleration 

1553 

8 

8 

Eng ine  oil  pressure 

Synchro 

6 

1 

Stick  force 

LVDT 

8 

Cabin  pressure 

Free  air  steam  temperature 

1553 

8 

1 

Rudder  pedal  position 

LVDT 

7 

8 

Vertical  velocity 

1553 

8 

8 

*These  parameters  fitted  for  ASIP  and  are  only  on  18  percent  of  aircraft.  The 
wiring  is  in  all  aircraft. 
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Tachometer  inputs  (0  to  80  Hz,  3  phase)  4 

Ac  ratio  5 

Dc  ratio  1 

Discretes  32 


1553  serial 


data  bus  (dua I ) 


1 


Audio 


(optional ,  1 ) 


The  unit  must  be  programmable  to  control  as  a  minimum  the  sampling  rates 
detailed  in  Tables  3-3  through  3-5  for  the  A-10,  F— 1 5 ,  and  F-16. 

The  conf iguration  II  requirement  for  a  data  acquisition  and  processing  unit 
has  the  following  minimum  signal  input  capability: 


Synchro 
Dc  inputs 
Tachometer  inputs 
Ac  ratio 
Dc  ratio 
Discretes 


2 

3 

4 
3 

1 

16 


1 553  ser i a  I  bus  (dua  I  )  1 

The  unit  must  be  programmable  to  control  as  a  minimum  the  sampling  rates 
detailed  in  Table  3-6. 

The  memory  module  shall  store  a  minimum  of  30  min  of  data  for  configuration 
I,  and  if  the  audio  option  is  added,  10  min  of  audio. 

For  configuration  II  the  memory  module  shall  store  at  least  15  min  of  data. 
The  recommended  parameter  list  is  given  in  Table  3-6. 

Configuration  II  calls  for  low  development  cost  and  the  lowest  practical 
investment  cost  while  still  providing  at  least  the  minimal  parameters  for 
accident  investigation. 


When  determining  the  parameter  list 
in  the  selection  of  parameters  should  be 
the  priority  list. 


for  this  configuration 
taken  into  account  whi 


the  objective 
le  utilizing 
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TAF,_F_  3-6 

PARAMETER  LIST  FOR  CONFIGURATION  II 


Samp  1 i ng  Rate, 
per  sec 

Word  Length, 
bit 

A i rspeed 

2 

11 

A  It i tude 

8 

12 

Normal  load  factor 

16 

9 

Eng i ne  rpm  2 

1 

8 

Elevator  position 

8 

7 

Ai leron  position 

8 

7 

Rudder  position 

8 

7 

Flap  pos i t i on 

1 

6 

Head i ng 

8 

10 

Pitch  at i tude 

8 

10 

Bank  angle 

16 

10 

Master  caution 

1 

16 

Power  lever  angle 

1 

8 

Total  raw  data  rate  860  bits  per  sec 
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The  parameters  for  accident  investigation  are  selected  to  enable  determina¬ 
tion  of  the  following: 

(a)  The  flight  path  of  the  aircraft 

(b)  The  attitude  of  the  aircraft  in  achieving  that  flight  path 

(c)  The  forces  acting  upon  the  aircraft  and  resulting  in  the  achieved 
flight  path  (lift,  drag,  thrust,  control  forces) 

(d)  The  general  origin  of  the  basic  forces 

Other  parameters  are  recorded  to  enable  any  problem  to  be  pinpointed  more 
accuratel y . 

In  producing  the  parameter  list  (Table  3-6)  for  this  configuration  it  was 
considered  that  where  signals  were  not  available  for  monitoring  elevator, 
aileron,  and  rudder  position  these  should  be  installed.  Signals  are  available 
on  the  A— 10,  F-15,  and  F— 1 6  to  provide  the  rest  of  the  information  considered 
essent i a  I . 

Special  Considerations  for  A- 10 

The  A- 10  operates  the  majority  of  its  missions  at  low  level  and  is 
intended  as  a  front  line  close  support  aircraft.  The  aircraft  design  is  such 
that  it  will  have  the  best  chance  of  survival  within  its  expected  environment. 
The  aircraft  contains  foam-filled  fuel  tanks,  which  will  hold  up  to  10,700  lb 
of  fuel  . 

In  the  event  of  a  crash  it  is  likely  that  the  fuel  will  escape  from  these 
tanks  slowly.  Any  resultant  fire  is  likely  to  be  small  and  for  a  relatively 
long  duration.  With  a  crash  survivable  storage  module  located  in  the  tail 
area  it  is  probable  the  fire  would  not  reach  that  location.  It  is  therefore 
recommended  that  crash  protection  be  to  the  same  level  as  the  other  aircraft. 

Included  within  the  master  caution  portion  of  the  parameter  list  shown  in 
Table  3-3  are  all  of  the  cautionary  discretes,  the  slat  position  discretes,  the 
landing  gear  discretes,  and  bingo  output.  Due  to  the  potential  within  this 
aircraft  for  operation  of  the  APU  while  airborne,  these  signals  are  included 
within  the  parameter  list. 

The  general  priority  parameter  list  shown  in  Table  3-2  includes  normal 
load  factor  and  lateral  and  longitudinal  acceleration.  These  ran  be  obtained 
from  the  velocity  X,  Y,  and  Z  signals.  The  three  attitude  rates  that  are  not 
currently  provisional  on  the  aircraft  have  been  left  out  of  the  parameter  list. 
Pitch  and  roll  rate  can  be  computed  from  the  pitch  attitude  and  bank  angle 
signal-..  It  is  believed  that  the  cost  of  installing  a  transducer  to  monitor 
yaw  rate  does  not  warrant  its  inclusion.  For  the  list  shown,  the  raw  data 
rate  into  the  signal  processor  is  1608  bits/sec. 
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Crash  Survival  Requirements 

From  the  Crash  Survival  Requirements  portion  of  Section  3,  the  shock  con¬ 
ditions  likely  to  be  experienced  in  a  crash  of  a  fighter,  attack,  on  training 
aircraft  exceed  those  of  TS0C51a  in  terms  of  the  duration  of  the  shock.  Cal¬ 
culations  indicate  that  if  the  memory  module  is  not  shock  mounted,  the  effects 
of  th  i  s  w  i  I  I  be  neg  I  i  g  i  b  I  e . 

We  were  unable  to  obtain  any  special  information  relating  to  the  penetra¬ 
tion  forces  likely  to  be  encountered  in  the  event  of  a  crash.  All  people  ques¬ 
tioned  considered  that  the  TS0C51a  test  requirement  was  adequate. 

The  information  obtained  with  respect  to  the  duration  and  intensity  of  a 
fire  resulting  from  a  crash  indicate  that  the  test  requirement  could  be  modified 
to  increase  the  temperature  and  decrease  the  duration.  This  does  not  consider 
the  case  of  a  recorder  not  directly  in  the  fire,  which  in  this  case  could  last 
for  the  30  min  of  the  TS0C51a  test. 


With  the  advent  of  the  new  types  of  material  being  used  for  thermal  pro¬ 
tection,  such  as  the  i ntumescent  coatings,  this  could  present  a  problem.  We 
would  advocate  the  testing  of  the  memory 
to  TS0C51a  with  a  further  fire  test  at  a 

ut i I i zed;  th i s 


i ntumescent 
i ntumescent 


materials  are 
temperature . 


module  data  retention  after  testing 
lower  temperature  if  ablative  or 
temperature  should  be  at  or  about 
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SECTION  4 


AVAILABLE  TECHNOLOGY 


SIGNAL  CONVERSION  AND  CONDITIONING 


The  analog  signals  generated  by  the  various  transducers  need  to  be  converted 


to  a  common  signal  format.  There  are  some  parameter  signals  that  will  be  con¬ 
verted  directly  to  a  digital  format,  such  as  the  tachometer  and  discrete  signals. 

Converting  the  signal  to  a  common 
easier.  The  types  of  signals  that  wi 1 

format  makes  the  management  of  the  data 

1  be  accepted  as  inputs  are  listed  below: 

(a) 

Synchros 

(b) 

Linear  variable  differential 

transformer 

(c) 

Tachometer 

(d) 

Rat iometr i c 

(e) 

Dc  differential,  bipolar  and 

un i pol ar 

(f) 

D i scretes 

Synchro  Conversion 

Converting  synchro  signals  to  a  digital  format  can  be  achieved  by  a  number 
of  different  methods.  Hybrid  devices  are  available  that  convert  a  synchro 
signal  directly  into  a  digital  word.  These  hybrid  devices  incorporate  a  number 
of  different  methods  such  as  successive  approximation,  harmonic  bound  oscilla¬ 
tors,  and  real-time  trigonometric  converters.  They  have  high  accuracy  and  good 
stability.  They  have  the  disadvantage  of  being  expensive  and  would  probably  be 
s i ng I e- sourced  as  the  units  are  highly  complex  and  general  I /  proprietary  hybrid 
devices.  The  more  cost-effective  method  is  to  design  the  demodulators  using 
discrete  components.  For  all  methods  the  synchro  signal  must  be  converted 
to  its  correspond i ng  sine  and  cosine  components. 


The  conversion  can  be  done  by  using  either  a  Scott-T-conf igured  transformer, 
which  tends  to  be  bulky  but  has  a  very  good  common  mode  isolation  character¬ 
istic,  or  an  equivalent  resistor  network.  The  resistor  network  has  the  advan¬ 
tages  of  being  compact,  having  a  high  input  impedance,  and  having  a  preferential 
failure  mode  that  is  open  circuit. 


A  typical  example  of  a  conditioning  ci 
these  sampling  methods  have  good  character i 
waveform  is  during  the  peak  of  the  carrier 
wave  will  produce  the  largest  signals  with 
and  other  imperfections  in  the  measuring  ci 


rcuit  is  shown  in 
sties.  The  ideal 
wave,  so  that  the 
respect  to  noise, 
rcuit. 


Figure  4-1  and 
time  to  sample  the 
modulated  carrier 
drift,  quadrature. 
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Figure  4-1.  Sampling  Synchro  Conversion 


The  sampled  signal  is  then  converted  to  digital  words  using  the  system 
analog-to-digital  converter;  these  correspond  to  the  sine  and  cosine  components. 
The  arctangent  conversion  is  then  carried  out  by  the  microprocessor.  It  is 
important  that  the  signals  are  sampled  as  synchronously  as  possible  to  reduce 
the  error. 


LVDT  Signals 


Linear  variable  differential  transformer  (LVDT)  signals  can  be  converted  to 
a  dc  signal  using  various  methods,  the  two  most  common  methods  are  discussed 
below. 


Synchronous  demodulation  is  shown  in  Figure  4-2.  The  signal  from  the  LVDT 
is  buffered  and  then  demodulated.  The  LVDT  reference  signal  is  used  to  switch 
the  demodulator.  The  output  from  the  demodulator  is  then  filtered  to  remove 
any  ripple  and  noise.  The  advantages  of  this  method  are  that  it  has  high  stabi¬ 
lity,  high  gain,  and  requires  only  a  two-wire  output  from  the  transducer. 

The  second  method  converts  the  ac  signal  to  dc  using  a  diode  discriminator. 
The  signal  is  smoothed  using  a  low-pass  filter.  The  resultant  dc  signal  is 
then  amplified.  This  method  requires  a  three-wire  input  and  it  has  relatively 
low  sensitivity.  The  main  advantage  of  this  method  is  that  it  requires  no 
reference  s i gnat . 
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Figure  4-2.  Linear  Variable  Differential  Transformer 
Synchronous  Demodulation 


Cc  signals  are  handled  with  relative  ease  and  only  require  scaling, 
offsetting,  and  linearization.  To  save  on  computing  power  within  the  micro¬ 
processor  it  may  be  expedient  to  carry  out  a  certain  amount  of  data  manipula¬ 
tion,  such  as  differentiation,  multiplication,  ratios,  square  roots,  and 
logarithms.  The  scaling  and  offsetting  of  the  signals  makes  the  choice  of 
an  ana  I og-to-d i g i tal  converter  easier. 

Over  the  last  five  years,  amplifier  technology  has  provided  a  largo  number 
of  high-performance  devices,  such  as  programmable  amplifiers,  FET  input  opera¬ 
tional  amplifiers,  and  instrumentation  amplifiers. 


i 

l 


There  are  various  types  of  signals  that  req 
there  is  usually  a  particular  type  of  amplifier 
cation,  a  few  of  which  are  discussed  below. 


uire  special  treatment, 
that  would  suit  that  app 


and 
I  i- 


FET  input  operational  amplifiers  are  ideal  devices  to  use  when  low  bias 
currents  and  high  input  impedances  are  required.  The  high  input  impedances 
mean  that  higher  resistor  values  can  be  used,  thus  minimizing  input  loading 
and  current  offset  errors,  so  that  improved  accuracy  is  achieved. 
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Chopper  stabilized  amplifiers  are  used  when  it  is  essential  to  maintain 
low-voltage  offsets  and  bias  currents,  with  time  and  temperature  variations. 
This  reduces  the  need  for  costly  calibration  exercises.  Currently,  drifts  of 
0.1  uV/°C  and  long-term  stability  of  2  pV  per  month  are  achieved.  The  dis¬ 
advantage  of  this  type  of  amplifier  is  the  possible  injection  of  noise  from 
the  modulator. 

Instrumentation  amplifiers  are  committed  gain  amplifiers  with  an  internal 
high-precision  feedback  network.  They  have  excellent  drift,  linearity,  and 
noise  rejection  characteristics,  which  makes  them  a  good  choice  for  extracting 
and  amplifying  low-level  signals  in  the  presence  of  high  common  mode  noise 
voltages.  These  types  of  amplifiers  are  mainly  used  as  transducer  amplifiers 
'or  strain  gages,  thermocouples,  and  quartz  pressure  transducers. 

Ratiometric  Dc 


The  ratio  conversion  can  be  carried  out  using  either  a  digital  or  an 
analog  technique.  1  he  digital  technique  reduces  the  hardware  requirements 
but  loads  the  programming,  which  may  be  unacceptable. 

For  the  digital  approach,  the  signals  from  each  leg  of  the  ratiometer 
element  are  buffered  and  converted  to  a  single-ended  output.  These  are  then 
multiplexed  and  buffered,  and  each  signal  is  then  digitized  and  converted  to 
a  single  word  by  the  processor.  The  processor  then  carries  out  the  ratiometeric 
algorithm. 

In  the  analog  scheme  shown  in  Figure  4-3,  the  single-ended  signals  are 
multiplexed  to  an  analog  multiplier  circuit,  and  the  output  of  this  is  then 
digitized.  Another  cost-effective  method  utilizes  the  reference  input  of 
the  analog-to-digital  converter.  This  scheme  is  useful  as  it  reduces  the 
normal  mode  gain  errors. 

Tachometers 


Tachometer  signals  are  normally  three-phase  and  vary  in  frequency  and 
amplitude  when  driven.  These  signals  can  be  either  converted  to  a  dc  voltage, 
which  is  then  digitized,  or  directly  converted  ir+o  a  digital  format.  The 
period  or  frequency  can  be  measured;  the  advantage  of  measuring  the  period  is 
that  the  time  taken  is  short.  As  this  parameter  is  only  sampled  once  a  second, 
measuring  the  frequency  is  a  simpler  solution. 

In  all  cases,  the  three-phase  signal  is  fed  to  a  saturating  transformer, 
as  shown  in  Figure  4-4.  The  output  is  then  full  wave  rectified.  The  three 
waveforms  are  then  current  summed  using  an  operational  amplifier.  The  pulses 
at  each  transition  are  used  to  increment  a  counter,  which  is  reset  every  second. 
The  digital  output  from  the  counter  after  every  second  bears  a  proportional 
relationship  to  the  speed  of  the  device  being  measured. 

For  period  measurements,  the  output  frequency  from  the  transformer  is  used 
to  gate  a  much  higher  clock  frequency.  This  frequency  is  fed  to  a  counter  whose 
output  is  related  to  the  speed  of  the  unit  being  measured.  The  frequency  output 
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can  be  converted  to  a  dc  voltage  using  a  diode  pump  circuit  or  a  frequency-to- 
voltage  converter.  The  dc  voltage  is  then  digitized  using  an  analog-to-digital 
converter.  This  method  requires  a  double  conversion  and  is  less  accurate. 

Discretes 

The  discretes  can  be  in  various  formats  such  as  28  v,  5  v,  open  circuit, 
closed  circuit,  shunt  (diode  isolated),  and  ac.  They  must  be  converted  from 
their  formats  to  a  definite  digital  signal,  which  has  to  be  referenced  to  the 
logic  return  of  the  power  supply  within  the  unit.  Each  discrete  signal  would 
be  buffered  using  a  form  of  comparator.  The  circuitry  around  this  device 
would  depend  on  the  type  of  discrete  signal  being  monitored. 

Ana  I oq-to-D i q i ta I  Conversion 

There  are  a  number  of  ways  of  converting  dc  signals  to  a  digital  format. 
There  are  advantages  and  disadvantages  to  each  method  depending  on  what  appli¬ 
cation  it  wi I  I  be  used  for.  The  different  methods  can  be  divided  into  two 
groups,  depending  on  whether  they  are  capacitor  charging  or  the  discrete 
voltage  comparison  type. 


The  capacitor  charging  analog-to-digital  converter  basically  depends 
on  digital  coding  of  the  time  taken  to  charge  a  capacitor  to  some  form  of 
reference  voltage  or  the  analog  input  voltage. 

The  discrete  voltage  comparison  analog-to-digital  converters  produce 
a  discrete  voltage  that  is  equivalent  to  a  digital  word,  the  discrete  voltage 
is  then  compared  with  the  analog  input  voltage.  This  discrete  voltage  is  then 
increased  or  decreased  until  it  compares  with  the  input  voltage.  The  genera¬ 
tion  of  the  discrete  voltage  can  be  simultaneous  or  sequential. 

The  four  most  common  types  of  analog-to-digital  converters  are  explained 
in  the  following.  They  are  the  dual-slope  analog-to-digital  converter,  which 
is  a  capacitor  charging  type,  and  the  ramp,  successive  approximation,  and 
parallel  analog-to-digital  converters. 


The  dual -si ope  analog-to-digital  converter  converts  the  analog  input 
voltage  to  a  proportional  time  interval,  which  is  measured  digitally.  This 
is  accomplished  by  integrating  the  input  for  a  predetermined  time.  The  refer¬ 
ence  voltage  is  then  switched  to  the  integrator,  and  is  integrated  down  from  the 
level  produced  by  the  integrated  input  until  a  zero  level  is  reached.  The  time 
taken  for  the  second  integration  is  proportional  to  the  average  of  the  input 
voltage  during  the  predetermined  integrating  period.  The  time  interval  is  then 
converted  to  a  digital  word  using  a  counter  (see  Figure  4-5). 


The  dual -slope  converter  has  a  low  conversion  rate  but  has  the  advantage 
of  high  accuracy  due  to  a  high  noise  immunity  and  a  virtually  zero  temperature 
coefficient.  The  main  source  of  error  is  due  to  thermal  drift  within  the 
reference  voltage  source. 
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Figure  4-5.  Dual-Slope  Ana log-to-Dig i+a I  Converter 


The  single  ramp  ana 
three  types  but  it  tends 
steps  required  for  f u  I 
bits  in  the  digital  word 
Figure  4-6.  Conversion 
the  digital -to-analog  ou 
clock  pulses,  the  output 
it  is  equal  to  the  input 
the  gate.  At  this  time, 
equivalent  of  the  analog 


og-to-digital  converter  is  the  simplest  of  the 
to  be  relatively  slow.  The  number  of  conversion 
scale  conversion  is  (2n  -  1)  where  n  is  the  number  of 
The  block  diagram  of  this  converter  is  shown  in 
starts  by  resetting  the  counter  to  zero;  this  changes 
tput  to  zero.  The  counter  then  begins  counting  the 
from  the  d i gi ta I -to-ana log  converter  ramps  up  until 
voltage.  The  comparator  then  switches,  thus  closing 
the  digital  word  in  the  counter  is  the  digital 
vo I tage. 


For  high-speed  conversion  the  required  counting  frequency  becomes 
prohibitive;  i.e.,  for  a  conversion  time  of  25  us  and  a  resolution  of  12  bits, 
a  frequency  of  163  NHz. is  required. 


A  successive  approximation  ana  I og-to-d i g i ta I  converter  is  shown  in  Figure 
4-7.  It  operates  by  comparing  the  input  voltage  with  a  series  of  voltages 
generated  by  the  digital -to-ana log  converter  until  the  two  are  equal  to 
within  one  least  significant  bit  (LSB).  The  series  of  voltages  is  generated  by 
setting  each  input  bit  to  the  d i g i ta I -to-ana log  converter  in  turn  starting  with 
the  MSB.  After  each  bit  is  set  the  output  of  the  digital -to-ana log  converter 
is  compared  with  the  input  voltage;  if  it  is  larger  the  bit  is  reset,  if 
smaller  it  is  left  set.  This  process  continues  until  the  least  significant 
bit  has  been  tried.  The  digital  word  at  the  input  of  the  digital -to-ana log 
converter  is  then  the  digital  equivalent  of  the  analog  Input  voltage. 
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This  method  only  requires  n  clock  cycles  to  complete  the  conversion, 
where  n  is  the  number  of  digital  bits  required,  hence  a  high  conversion  speed 
is  possible.  The  improved  speed  character i st ics  are  paid  for  by  an  increase 
in  circuit  complexity;  but  with  present  large-scale  integration  technology 
this  presents  no  particular  problem.  There  are  a  number  of  industry  standard 
devices  available  in  this  configuration,  thus  mu Itisourci ng  is  possible. 


The  last  method  to  be  considered  here  is  called  parallel  or  simultaneous 
conversion  and  a  circuit  is  shown  in  Figure  4-8.  An  analog  comparator  with 
a  fixed  voltage  reference  is  used  for  every  quantization  level  that  is  required. 
The  outputs  from  the  comparators  then  drive  logic  circuitry,  which  produces 
a  digital  word;  this  word  is  equivalent  to  the  analog  input. 


A  very  high-speed  conversion  rate  is  possible  with  this  circuit.  The 
speed  limits  are  governed  by  the  propagation  delays  of  the  components  used. 
The  drawback  with  this  system  is  the  amount  of  hardware  required  to  do  the 
data  conversion,  it  approximately  doubles  for  each  extra  bit  required. 

A  summary  of  the  above  methods  is  shown  in  Table  4-1. 
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Figure  4-8. 
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TABLE  4-1 


SUMMARY  OF  ANALOG-TO-D I G I TAL  CONVERTER 


Method 

Speed 

Accuracy 

Comp  1 exi ty 

Dual  slope 

S  tow 

Very  good 

High 

Single  slope 

Slow 

Poor 

Med i urn 

Successive  approximation 

Fast 

Good 

Med  ium 

Para  1 1  el 

Very  fast 

Good 

Very  high 

MULTIPLEXING 

Multiplexing  devices  can  be  divided  into  two  basic  groups — electromechanical 
and  sem i conductor  elements.  Examples  of  electromechanical  multiplexers  are 
relays,  crossbar  switches,  and  motor  driven  commutators.  They  have  good  isola¬ 
tion  characteristics  but  have  the  disadvantages  of  being  bulky  and  expensive 
and  requiring  a  fairly  large  amount  of  power;  they  will  not  be  considered  for 
this  appl i cat  ion. 

The  semiconductor  multiplexing  circuits  can  be  divided  into  analog  and 
digital  functional  groups.  Both  types  use  proven  technologies,  and  devices 
are  available  from  a  number  of  semiconductor  manufacturers.  Digital  multi¬ 
plexers  will  be  used  in  the  system  to  transfer  the  digital  data,  such  as 
the  discrete  signals,  onto  the  microprocessor  data  bus.  The  analog  multiplexers 
are  fabricated  using  CMOS  technology  and  can  be  obtained  with  or  without 
input  protection,  each  having  its  own  use. 

The  protected  input  devices  are  used  when  interfacing  directly  to  external 
equipment.  This  is  because  these  units  can  be  subject  to  a  number  of  poten¬ 
tially  destructive  conditions: 

(a)  Signals  may  be  present  when  power  has  been  removed  from  the 
mu  1 1 i p I exer . 

(b)  Induced  voltage  spikes  from  nearby  sources. 

(c)  Static  discharge  during  fitting  and  maintenance. 

(d)  Grounding  problems. 

(e)  Accidental  shorting  to  incorrect  signal  sources. 

A  common  failure  mode  with  this  type  of  device  is  latch  up.  This  can  be 
avoided  by  selecting  devices  that  employ  such  technologies  as  floating  body  and 
buried  layer.  These  devices  greatly  reduce  the  effects  of  overvoltage  latch  up. 
Protected  devices  also  have  the  disadvantage  of  having  a  higher  on  resistance 
due  to  the  added  series  current  limit  resistance. 
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Unprotected  multiplexers  are  ideal  for  use  within  the  system  where  there 
is  no  danger  of  damage  from  transient  voltages;  for  example,  between  the 
analog-to-digital  converter  and  the  signal  conditioning  circuits.  They  also 
have  better  performance  characteristics  because  they  are  free  from  the  com¬ 
promises  used  to  solve  the  latch  up  problems. 

Besides  the  different  devices  available  for  multiplexing  there  are  dif¬ 
ferent  techniques  that  can  be  used,  such  as  voltage,  current,  and  flying 
capacitor  multiplexing.  Each  technique  has  its  own  advantages  and  disadvantages. 

The  flying  capacitor  multiplexer  is  used  for  low-level  signals.  It 
provides  considerable  immunity  from  common-mode  interference  and  is  essen¬ 
tially  a  floating  two-wire  sample  hold.  The  common  mode  interference  is  not 
transferred  across  the  switches. 


Voltage  multiplexing  can  be  used  for  either  high-  or  low-level  signal 
multiplexing.  When  used  for  low-level  multiplexing  (i.e.,  less  than  1  v),  a 
differential  multiplexer  should  be  used  to  obtain  the  required  accuracies. 
Problems  that  most  frequently  arise  with  low-level  signals  are  due  to  thermal 
effects  and  interference.  The  lines  are  run  in  pairs,  and  differential  techni¬ 
ques  are  used  to  remove  any  interference  that  is  introduced  as  a  common  mode 
signal.  Care  must  also  be  taken  when  multiplexing  differential  signals  to 
ensure  that  the  matching  between  the  switches  is  good,  otherwise  the  common 
mode  rejection  is  reduced. 


The  most  common  type  of  voltage  multiplexing  for  a  high-level  signal  con¬ 
sists  of  a  bank  of  switches  connected  to  a  common  output  bus,  as  shown  in 
Figure  4-9.  The  output  bus  is  then  buffered  using  a  non  inverting  operational 
amplifier.  This  configuration  has  the  advantage  of  being  simple  and  offers  a 
high  input  impedance.  The  range  of  input  signal  voltage  depends  on  the  choice 
of  multiplexing  switch  and  is  governed  by  the  breakdown  voltage  of  the  CMOS 
gate. 


Current  multiplexing  is  used  for  switching  of  high-voltage  inputs.  A  typical 
conf iguration  is  shown  in  Figure  4-10.  The  switching  takes  place  at  the  summing 
junction  with  protection  diodes  to  ground;  hence,  the  switches  are  never  exposed 
to  high  voltages.  This  type  of  multiplexing  has  high  immunity  to  transient 
voltages  and  a  constant  input  impedance  while  conducting,  and  is  safe  when  the 
power  is  removed  from  the  multiplexer.  With  modern  technology  devices  the  input 
impedance  can  be  high,  thus  swamping  out  the  source  and  multiplexer  on  resis¬ 
tance  and  giving  a  high  degree  of  signal  isolation.  The  gain  of  each  channel 
is  easily  adjusted  by  adding  the  appropriate  resistor  value  to  the  input 
(Rc). 


This  circuit  can  be  further  improved  by  exchanging  the  clamping  diodes 
with  a  complementary  switch.  This  ensures  that  the  input  resistor  is  always 
terminated  to  a  virtual  ground,  thus  the  input  impedance  is  constant.  This 
avoids  settling  problems  at  the  transducer  due  to  load  changes.  Current 
multiplexing  also  reduces  the  affect  of  line  and  interconnection  resistances. 
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Figure  4-9.  High-Level  Voltage  Multiplexer 
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Figure  4-10.  Current  Multiplexing 
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Both  types  of  multiplexers  suffer  from  the  static  and  dynamic  types  of 
error.  Static  errors  originate  from  switch  leakage,  offsets  in  buffer  ampli¬ 
fiers,  and  gain  errors  due  to  on  resistance,  source  resistance,  amplifier 
input  resistance,  and  gain  nonlinearity.  Dynamic  errors  are  due  to  charge 
injection  from  the  switch  control  voltages,  settling  times  on  the  common  bus, 
crosstalk,  and  amplifier  settling  character i st i cs .  The  dynamic  errors  can  be 
greatly  reduced  by  careful  design  and  layout  of  the  circuit. 

If  current  multiplexing  is  used,  consideration  must  be  given  to  the  leakage 
currents  in  the  switches,  which  are  temperature  dependent.  The  leakage  current 
generally  doubles  for  every  10°C  rise.  This  means  that  the  number  of  channels 
that  are  multiplexed  onto  one  bus  is  limited,  otherwise  large  input  offsets 
are  created  if  the  following  circuit  has  a  high  input  impedance. 

1553  Interface 

Two  chip  sets  are  available  for  the  design  of  a  remote  terminal  unit. 

These  are  manufactured  by  Harris  Semiconductor  and  Smith  Industries  Ltd. 

The  Smith  chip  set  is  made  up  from  two  large-scale-integration  chips,  each 
with  its  own  specific  function.  Device  one  is  a  data  validation  Manchester  code/ 
decode  function,  one  of  these  is  reguired  for  each  bus  to  be  monitored,  hence 
two  are  reguired  for  a  dual  bus.  Device  two  is  a  protocol  sequencer  and  only 
one  is  required  per  remote  terminal  unit.  To  make  up  a  complete  remote  terminal 
unit  using  these  devices  extra  components  are  required,  such  as  coupling  trans¬ 
formers  and  clock  circuits.  Both  of  the  chips  require  only  a  5-v  supply. 

The  large-scale  integration  process  enables  a  very  compact  remote  terminal 
unit  (RTU ) .  The  only  disadvantage  with  the  Smith  chip  set  is  that  it  can  only 
be  used  on  the  1553B  standard  data  bus.  Norma  I  a ir-Garrett  Limited  (NGL)  is  cur¬ 
rently  evaluating  this  chip  set,  using  one  of  the  Smith  early  production  units. 

The  Harris  device  is  fabricated  using  CMOS  technology  and  is  designed  as 
a  Manchester  encoder-decoder .  It  requires  a  large  amount  of  support  hardware 
to  interface  to  the  system  microprocessor  data  bus  and  the  protocol  sequencing 
of  the  1553  data.  This  makes  the  complete  remote  terminal  unit  more  adaptable 
to  various  standards  of  the  1553  system.  The  board  area  required  for  this 
system  is  approximately  double  the  amount  of  the  Smith  Industries  system. 

DATA  PROCESSING  DEVICES 

The  crash  survivable  flight  data  recorder  (CSFDR)  system  must  be  managed 
by  some  type  of  digital  control.  This  can  be  accomplished  by  either  a  discrete 
logic  control  circuit  or  a  mi croprocessor .  The  optimum  solution  is  to  use  a 
microprocessor.  The  tasks  that  the  microprocessor  must  accomplish  are  data 
compression,  multiplexing  control,  analog-to-digital  conversion  manipulation, 
data  compilation,  and  built-in  test  routines. 

There  are  on  the  market  a  variety  of  microprocessors;  both  8-  and  16-bit 
devices  are  currently  available.  Based  on  the  amount  of  work  that  is  required 
for  configurations  I  and  III,  a  16-bit  microprocessor  has  been  chosen,  while  an 
8-bit  m icroprocessor  would  probably  suffice  in  the  case  of  configuration  II. 
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In  the  16-bit  microprocessor  range  there  is  currently  a  choice  of  four. 

The  Texas  Instruments  TMS9900  has  been  used  in  military  projects  for  a  number 
of  years.  A  derivative  of  this  (PB59900)  is  being  produced,  and  employs 
|2l  technology.  Availability  in  a  military  version  is  uncertain,  and  second 
sources  are  questionable;  in  addition,  some  special  interface  circuits  are 
requ i red . 

Motorola  has  under  development  a  16-bit  mi croprocessor  (68000).  This 
device  shows  a  lot  of  promise;  but  it  is  unlikely  to  be  available  in  a  military 
version  before  1984. 

The  Intel  8086  is  presently  being  incorporated  in  several  airborne  system 
designs  at  AiResearch.  This  unit  has  some  performance  limitations,  but  the 
unit  has  a  demonstrated  capability  in  the  airborne  environment. 

The  most  promising  16-bit  m i croprocessor  that  is  presently  available  is  the 
Z8000.  It  has  the  advantage  of  being  manufactured  by  two  companies — Zilog  and 
Advanced  Micro  Devices.  Zilog  has  the  Z8000  available  to  conform  to  MIL-STD-883 
and  expect  approval  of  the  MIL-M-38510  in  the  second  quarter  of  this  year. 

It  is  expected  that  Advanced  Micro  Devices  will  follow  closely  behind  Zilog  with 
their  military  version.  NGL  is  currently  evaluating  this  processor  for  avionic 
equipment  as  the  United  Kingdom  Ministry  of  Defense  shows  signs  of  standardizing 
this  device.  The  U.S.  Air  Force  is  also  supporting  development  of  HOL  compiler 
capability  for  this  device,  and  it  may  become  a  U.S.  military  standard  also. 

There  are  a  number  of  8-bit  microprocessors  available  to  military  specifica¬ 
tions  that  are  all  well  proven.  The  primary  choice  is  between  the  Intel  8080, 
Motorola  6800,  and  the  Zilog  Z80.  Ail  three  devices  have  been  used  by  AiResearch 
and  NGL.  The  6800  is  the  only  device  that  is  currently  available  to  full  qual¬ 
ification  under  MIL-M-38510.  The  others  are  available  under  the  MIL-STD-883 
screening  process. 

DATA  COMPRESSION  ALGORITHMS 

To  record  at  least  30  min  prior  to  an  accident,  the  configuration  I  data 
rate  would  require  approximately  3  Mbits  of  uncompressed  data  to  be  stored  in 
the  crash  protected  memory.  This  figure  does  not  include  any  storage  that 
might  be  set  aside  for  additional  data  such  as  takeoff  or  incident  information. 

In  view  of  the  relatively  high  incremental  cost,  size,  and  power  requirements 
of  solid-state  memory  as  compared  with  magnetic  tape,  together  with  the  desire 
to  evaluate  the  potential  of  a  solid-state  store,  considerable  effort  has  been 
put  into  studying  ways  in  which  the  storage  requirements  might  be  reduced  by 
application  of  data  compression  techniques. 

Delta  coding  (i.e.,  storing  differences  in  signal  amplitude)  and  zero  order 
prediction  (e.g.,  floating  limit  threshold)  are  common  techniques  for  achieving 
poi nt-of- source  compression,  mainly  because  of  their  ease  of  implementation  and 
relatively  high  efficiency.  With  the  advent  of  more  powerful  microprocessors 
and  the  experience  from  a  wide  variety  of  fields  becoming  available  where  com¬ 
pression  is  now  successfully  being  applied  (see  Table  4-2)  it  is  appropriate  to 
reappraise  the  possible  algorithms  that  might  be  successfully  applied  to  CSFDR 
systems  for  onboard  data  reduction. 


m 
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TABLE  4-2 


APPLICATION  AREAS  OF  DATA  COMPRESSION 


Data  Source 

Examples  of  Data  Compression  Advantages 

Seismic  data  from  geophones 

Rugged  and  transportable  on-site  data 
acquisition  system 

High  energy  physics  data 
from  particle  detectors 

Reduction  of  data  storage  requ i rements, 
especially  in  rare  event  experiments 

Telemetry  and  communication 
data  from  satellites 

Reduction  of  transmitter  power  and  ground 
storage  requirements 

E 1 ectrocard iogram  data 

Real-time  transmission  over  telephone 
lines  and  reduction  in  hospital  storage 
requirements  and  file  retrieval  time 

E 1 ectron ic  ma i 1 

Increased  traffic  capacity 

Two  forms  of  data  compression  should  be  identified — reversible  compression, 
where  complete  data  recovery  of  the  original  information  is  possible  through  the 
appropriate  decompression  algorithms,  and  irreversible  compression,  which  does 
not  permit  the  recovery  of  the  original  information  without  some  loss  or  distor¬ 
tion. 


For  a  compression  technique  to  be  information  preserving  implies  that  there 
must  have  been  redundancy  in  the  original  data.  Such  redundancy  may  be  obvious 
as  in  the  case  of  a  12-bit  ana log-to-d i g i ta I  value  being  stored  in  two  bytes. 
Other  forms  of  redundancy  arise  from  the  fact  that  certain  values  or  sets 
of  values  occur  more  often  than  others.  In  such  cases  compression  may  be 
achieved  by  designing  codes  which  allow  one  to  assign  the  most  compact  codes 
to  the  values  with  the  highest  probabilities  of  occurrence.  However,  the  main 
difficulty  with  applying  these  encoding  schemes  to  the  CSFDR  system  is  that 
under  critical  flight  conditions  the  probabilities  used  for  constructing  the 
code  book  could  be  considerably  different  from  those  observed  under  cruise 
conditions.  Hence,  data  expansion  rather  than  data  compression  may  occur. 
Methods  have  been  suggested  for  overcoming  the  difficulties  experienced  by 
changing  source  probabilities  by  use  of  adaptive  algorithms  (e.g.,  Ref.  4-1). 
However,  these  techniques  rely  on  accumulating  large  data  samples,  or  training 
sets,  and  hence  tend  to  react  rather  slowly  to  signal  statistic  changes  as  well 
as  providing  poor  data  security.  Also,  for  signals  with  a  large  dynamic  range, 
the  code  books  and  corresponding  search  time  tend  to  become  large.  However, 
coding  algorithms  that  grow  only  linearly  with  block  length  are  being  developed 
so  that  real-time  compression  still  remains  feasible. 


Two  approaches  may  be  adopted  to  the  information  distortion  introduced 
by  the  irreversible  techniques  (i.e.,  signal  approximation).  Either  the 
allowable  distortion  may  be  limited  and  the  data  rate  minimized  or  the  maximum 
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rate  fixed  and  the  distortion  minimized.  For  the  CSFDR  system  the  second  approach 
is  the  most  suitable,  in  order  to  ensure  that  an  adequate  period  of  pre-accident 
information  is  recorded. 


Predictors  and  interpolators  allow  data  points  that  lie  within  a  certain 
tolerance  or  aperture  not  to  be  stored.  These  algorithms  are  in  general  simple 
to  implement  and  there  is  a  direct  relationship  between  the  tolerance  and  the 
resultant  mean  square  error  of  the  reconstructed  data.  However,  the  higher 
order  methods  are  particularly  sensitive  to  noise. 

Polynomial  approximations  such  as  spline  fits  are  a  useful  way  of  para¬ 
meterizing  the  data  and  of  smoothing  out  noise.  However,  because  they  require 
more  computing  power  and  precision,  and  because  they  operate  on  a  set  of  samples 
accumulated  over  a  large  period  of  time,  the  chance  of  data  staleness  is 
i ncreased . 

Transformations  such  as  the  Karhuren-Loeve  attempt  to  discover  redundancy  in 
the  data  by  searching  for  components  that  do  not  add  significant  information. 

Such  a  transformation  is  successful  if  there  is  an  underlying  approximate  linear 
relationship  in  the  data.  Similarly,  a  Fourier  transform  will  achieve  compres¬ 
sion  of  data  that  is  essentially  sinusoidal  in  nature  by  allowing  it  to  be 
represented  by  relatively  few  frequency  component  coefficients. 

Clearly,  all  these  techniques  depend  on  the  nature  of  the  signals,  and 
again  the  problem  of  the  signal  form  changing  significantly  under  certain 
critical  flight  conditions  may  lead  to  data  expansion.  However,  this  very 
problem  suggests  their  usefulness  in  a  discriminatory  role,  either  for  flagging 
recording  requirements  in  abnormal  flight  conditions,  or  as  a  more  sophis¬ 
ticated  measure  for  maintenance  data  recording  decisions  than  simple  thres¬ 
holding  on  single  parameters. 

The  choice  of  data  organization  within  the  crash  protected  memory  will 
be  critical  in  determining  the  final  compression  figure  achieved.  In  a  basic 
fixed  frame  format  all  the  data  to  be  recorded  is  stored,  and  hence  the 
positional  information  identifies  each  variable  and  only  the  elapsed  time 
need  be  recorded  for  each  base  time  period  (frame).  At  the  other  extreme 
a  fully  variable  format  allows  any  selected  variable  to  be  stored  and  identi¬ 
fied  by  tagging  the  value  with  a  parameter  identification  and  a  time.  However, 
such  a  format  can  introduce  considerable  overheads,  expecially  if  there  is  a 
large  parameter  set  and  high  sampling  rates,  due  to  the  long  variable  identifi¬ 
cation  fields. 

In  practice,  the  optimum  choice  of  format  depends  both  on  the  frequency 
of  the  data  coming  from  the  compression  algorithms  and  the  degree  of  data 
security  and  integrity  required.  All  these  ideas  will  be  reviewed  in  more 
detail  in  the  following  sections  in  order  to  provide  the  basis  for  the  optimal 
choice  of  compression  algorithm  and  store  layout  design. 

Predictors  and  I nterpolators 

Among  the  simplest  algorithms  to  implement  are  the  low-order  predictors 
and  interpolators.  In  prediction,  a  new  sample  value  is  effectively  decomposed 
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into  a  part  that  is  correlated  with  past  samples  (e.g.,  a  linearly  weighted 
sum)  and  a  part  that  is  uncorrelated  with  them  (i.e.,  the  prediction  error). 
Interpolators  are  implemented  in  an  analogous  way  to  predictors  except  that 
the  estimator  consists  of  a  combination  of  past  and  future  samples. 

The  most  commonly  used  predictor  is  the  zero-order  with  floating  limits 
in  which  a  tolerance  band  is  placed  about  the  last  stored  value.  If  the 
following  sample  lies  within  this  aperture  it  is  not  stored.  Otherwise,  it  is 
shored,  and  a  new  aperture  is  set  up  around  this  new  sample  value  (see  Figure 
4-1  la).  In  common  with  other  compression  routines,  a  time-tag  or  run  length 
indicator  needs  to  be  associated  with  each  stored  value.  One  strategy  is  to 
associate  a  bit  with  each  sample,  those  not  successfully  predicted  having  the 
corresponding  bit  set  to  zero,  and  those  successfully  predicted  having  the 
correspond i ng  bit  set  to  one  (Figure  4— 11b).  Another  strategy  is  to  store  a 
time  code  along  with  each  value  (Figure  4-1 1c).  For  the  run- length  method 
(Figure  4-1  Id)  the  number  of  times  a  value  has  been  used  to  predict  successive 
samples  is  stored. 

Figure  4-12  illustrates  the  performance  of  a  zero-order  predictor  with 
floating  limit  on  data  published  in  Ref.  4-2.  It  can  be  seen  that  even  though 
the  signal  is  fluctuating  rapidly  data  compression  is  possible.  With  zero  tol¬ 
erance  the  algorithm  is  completely  reversible.  If  the  tolerance  is  increased 
to  +1  digitization  (LS8  =  0.01  g),  the  algorithm  is  no  longer  truly  reversible 
although  the  effect  on  the  recorded  data  is  primarily  that  of  filtering  out 
noise.  Larger  tolerances  clearly  reduce  the  fidelity  of  the  reconstructed  sig¬ 
nal  although  many  of  the  important  characteristics  remain.  The  correspond i ng 
compression  and  mean  square  error  for  different  tolerances  is  shown  in  Figure 
4-13a  along  with  those  for  the  first  30  sec  of  data  (medium  activity)  and  final 
30  sec  of  data  (high  activity). 

Results  are  shown  in  Figures  4- 1 3b  and  4-14  for  a  first-order  predictor 
using  the  past  two  samples  as  a  straight  line  prediction  to  the  same  data.  It 
can  be  seen  that  the  higher-order  predictor  performs  no  better  than  the  zero- 
order  predictor  on  this  particular  data.  Experience  from  other  fields  (Refs. 
4-3,  4-4)  confirms  that  in  general,  as  the  order  of  the  estimator  increases, 
the  compression  ratio  decreases  along  with  the  mean  square  error. 

The  results  of  Figures  4-13c  and  4-15  demonstrate  the  higher  compression 
rates  achievable  during  the  same  periods  on  a  different  parameter  (LSB  =  0.35 
deg) . 


The  main  problem  with  interpolation  is  one  of  data  staleness,  especially 
in  the  situation  where  there  are  a  large  number  of  interpolated  points  lying 
between  the  current  data  sample  and  the  previous  stored  value.  The  problem 
could  be  overcome  by  some  method  of  intermediate  nonvolatile  memory  storage 
but  the  usual  problems  of  processing  time  and  store  location  read-write 
lifetime  make  the  solution  nontrivial. 

It  therefore  appears  that  the  zero-  and  first-order  predictors  represent 
the  best  compromise  between  complexity,  compression  ratio,  and  signal  preser¬ 
vation.  The  first-order  predictor  offers  advantages  over  the  zero-order 
prediction  only  over  periods  where  the  signals  are  changing  at  a  relatively 
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Figure  4-11.  Operation  of  Zero-Order  Predictor  on  Typical  Input  Data 
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Figure  4-15.  Effect  of  Tolerance  on  Zero-order  Predictor  for  Pitch  Attitude 

constant  rate.  The  higher-order  predictors  become  very  noise  sensitive  (e.g.. 
Ref.  4-3),  as  can  be  seen  from  the  larger  tolerance  values  of  the  first-order 
predictor. 

Adaptive  Compression 

In  principle,  a  predicted  sample  may  be  estimated  by  using  a  linear 
weighting  of  N  previous  samples: 


N 

xp^n^  =  y  ®j  X  tn_j 

j  »  1 

where  for  the  first-order  predictor  described  above  N=2,  B]=2,  and  B2=-1 
(i.e.,  a  simple  straight  line  prediction  passing  through  point  X  (tn-2)  and 
X  < tn— 1 ) .  However,  the  coefficients  Bj  can  be  calculated  so  as  to  produce 
the  best  signal  fidelity.  In  practice,  two  difficulties  have  been  found  with 
this  approach: 

(a)  The  signal  characteristics  can  vary  quite  considerably  with  time 
so  the  optimal  set  of  coefficients  is  continually  changing.  This 
would  cause  overheads  in  storing  the  coefficients  to  allow  signal 
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recon+ruc+ion  as  well  as  a  slow  response  time  due  to  the  learning 
period  required  to  estimate  the  optimal  Bj  from  the  signal. 

(b)  The  optimal  Bj  can  only  be  calculated  in  some  mathematical  sense 
(e.g.,  mean  square  error)  but  such  measures  are  notoriously  poor 
as  criteria  for  obtaining  the  best  signal  fidelity.  A  good  example 
of  this  is  in  electrocardiogram  data  where  certain  important  morpho¬ 
logical  features  can  be  lost  using  algorithms  that  appear  to  give  a 
better  mean  square  error  than  those  that  retain  the  important  diag¬ 
nostic  characteristics. 


Entropy  Encodinc 


There  is  an  obvious  redundancy  within  each  signal  in  that  neighboring 
samples  are  not  independent.  Thus,  each  sample  could  be  more  economically 
represented  by  a  difference  from  a  previous  value  rather  than  an  absolute 
value.  Such  delta  values  would  require  storage  of  the  absolute  value  at 
regular  intervals  in  order  to  allow  reconstruction  of  the  original  signal  and 
to  ensure  data  integrity. 


Even  if  the  delta  values  are  stored,  redundancy  still  remains  in  that 
the  values  do  not  occur  with  equal  probability.  Figure  4-16  illustrates 
this  probability  of  occurrence  for  the  data  of  Figure  4-12  for  differences 
that  can  be  contained  in  3  bits  (8  levels,  Figure  4-16a)  and  five  bits  (32 
levels.  Figure  4-16b) . 
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Figure  4-16.  Probability  of  Occurrence  for  Different  Deltas 
Over  Two  Delta  Ranges 
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One  of  the  simplest  ways  of  coding  the  data  taking  into  account  the 
statistical  characteristics  of  the  signal  is  through  the  application  of  an 
encoding  technique  such  as  that  due  to  Huffman  (Ref.  4-5).  By  using  probabili¬ 
ties  derived  from  the  differences  rather  than  absolute  values,  the  sensitivity 
to  input  signal  types  can  be  greatly  reduced.  The  zero-order  entropy  will 
give  a  measure  of  the  maximum  compression  possible: 

i  =n 

H  =  -  ^  P(xi}  lo92  p<*i) 
i  =  I 

where  P(Xj)  is  the  probability  associated  with  each  of  the  n  possible  difference 
values.  From  the  probability  distribution  of  the  deltas  it  can  be  seen  that 
there  is  a  strong  underlying  statistical  dependence  of  the  deltas  even  on  data 
that  is  rapidly  varying.  The  zero  entropy  calculation  on  this  particular 
distribution  gives  a  theoretical  limit  for  compression  of  1.3.  A  simple 
encoding  strategy  gives  a  compression  of  1.2. 

However,  the  penalty  for  this  compression  is  a  decrease  in  data  integrity 
(always  true  if  redundancy  is  removed)  and  an  increase  in  data  management 
complexity  due  to  the  variable  length  values  in  memory.  In  general,  it  is 
found  (Refs.  4-1,  4-3,  4-4)  that  compression  ratios  of  1.2  to  2  are  typical 
depending  on  the  nature  of  the  signal,  in  particular  the  amount  of  redundancy 
in  the  raw  data. 

There  are  therefore  useful  gains  to  be  made  by  entropy  encoding  and  a  more 
detailed  study  of  optimal  coding  strategies  would  seem  worthwhile  (e.g.,  Refs. 
4-5,  4-6),  particularly  as  the  previous  example  probably  represents  the  worst- 
case  situation  (i.e.,  a  rapidly  fluctuating  signal).  However,  more  accurate 
compression  figures  will  have  to  be  obtained  using  larger  samples  of  data 
before  it  can  be  assessed  whether  entropy  encoding  should  be  included  in  any 
final  design.  There  is  a  significant  compression  available,  and  the  choice  of 
a  flexible  data  format  would  allow  it  to  be  included  at  a  later  stage. 

Kahurnen-Loeve  Transformation 


Entropy  encoding  is  not  the  only  way  in  which  redundancy  may  be  removed. 
The  Karhuren-Loeve  transformation  (KLT)  (e.g..  Ref.  4-7)  is  basically  an  ortho¬ 
gonal  transform  that  is  optimum  in  a  mean-square  error  sense:  a  least  squares 
fit  in  high  dimensionality.  The  principle  is  shown  in  Figure  4-17  for  a  two- 
dimensional  distribution  of  data  points.  It  is  clear  (although  this  is  not 
true  if  one  inspects  values  from  a  higher  dimensional  space,  e.g.,  a  30- 
dimensional  space  of  30  aircraft  parameters)  that  the  points  lie  distributed 
around  a  line.  The  KLT  provides  an  orthogonal  transformati on  that  minimizes 
the  mean  square  error  of  the  data  within  the  new  coordinate  set  (Figure  4-19b). 
Further,  it  can  be  arranged  that  the  axes  are  ordered  in  a  way  that  reflects 
the  relative  importance  of  the  information  contributed  by  each  dimension 
(Figure  4-17c).  Hence,  the  name  ’the  method  of  principle  components'  is  often 
attributed  to  this  transform.  In  the  above  example,  XI'  contains  more  informa¬ 
tion  than  X2'  and  depending  on  what  error  can  be  tolerated,  it  may  be  that 
measurements  X2 '  can  be  ignored.  Hence,  the  original  two-dimensional  data 
could  be  approximated  by  one-dimensional  data. 
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(c)  COMPONENT  *'R’6 

Figure  4-17.  Karhuren-Loeve  Transformation  Example 

The  calculation  of  the  values  from  this  function  is  stra ightforward 
and  can  easily  be  performed  onboard,  especially  with  the  advent  of  more 
powerful  m icroprocessors. 

Other  transforms  such  as  Hadamard  are  available,  and  the  next  phase  should 
be  used  to  assess  the  suitability  of  these  transformations  and  the  complexity- 
benefit  tradeoffs  performed  in  more  detail. 

Algorithm  Selection 

In  view  of  the  wide  variety  of  signal  types  it  was  decided  that  the 
zero-order  predictor  with  floating  limit  would  probably  give  the  best  trade¬ 
off  between  algorithm  complexity,  compression  ratio,  and  the  signal -type 
independence.  Apart  from  the  results  presented  it  has  been  shown  that  the 
algorithm  achieves  compression  ratios  of  between  2  and  60  for  a  typical  range 
of  telemetry  signals  (Ref.  4-8).  For  flight  data  overall  compression  ratios 


AIREKARCH  MANUFACTURING  COMPANY 


81-17693 
Page  4-25 


of  around  10  for  cruise  data  and  4  for  data  recorded  during  turbulence  have 
been  recorded  (Ref.  4-2)  using  zero-order  prediction  and  simple  data  packing 
rules.  By  choosing  a  tolerance  equal  to  the  accuracy  requirement  for  each 
parameter  of  zero  the  data  compression  would  be  truly  reversible,  although 
a  slightly  greater  tolerance  would  possibly  be  acceptable  for  suppressing 
noise. 

By  storing  only  delta  values  a  further  compression  ratio  of  two  is  easily 
obtainable  although  the  full  precision  values  would  have  to  be  stored  at  regular 
intervals  in  order  to  ensure  data  integrity. 

However,  with  a  16-bit  m icroprocessor  onboard  much  more  processing  power 
than  the  above  algorithm  requires  is  available.  This  power  could  be  used 
to  implement  an  optimal  coding  strategy  where  possibly  another  30  percent 
of  reversible  compression  could  be  achieved.  The  other  area  where  the  impli¬ 
cation  of  inclusion  of  a  new  generation  microprocessor  should  be  studied  is 
onboard  analysis.  Such  transformat  ions  as  Karhuren-Loeve  could  offer  more 
sophisticated  measures  on  which  to  base  recording  strategies,  whether  it  be 
for  crash  or  maintenance  data.  These  transtormat i ons  could  also  be  used  to 
remove  redundancy,  which  exists  because  the  parameters  themselves  are  not 
completely  independent.  For  example,  if  the  power  lever  angle  changes,  there 
will  be  a  consequent  change  in  other  parameters  such  as  the  engine  speed,  fuel 
flow,  etc.  These  techniques  should  be  studied  in  more  detail  in  the  next 
stage  since  they  could  offer  significantly  better  compression  than  has  been 
previously  possible. 

Data  Format 

In  order  to  estimate  the  final  compression  figure  obtainable  it  is 
necessary  to  consider  the  organization  of  the  crash  protected  memory.  There 
are  many  formats  that  may  be  defined,  each  of  which  will  be  optimal  under 
certain  operational  conditions  and  assumptions.  The  main  considerations  are: 

Ef f i c i ency--M i n imi zat i on  of  identification  overheads. 

F I  ex i b i I i ty — Possibility  of  being  able  to  add  new  information 
or  define  minor  changes  in  store. 

I nteqr i ty — Minimization  of  data  loss  if  incorrect  bits  stored. 

S i mp I i c i ty — Minimization  of  processor  formatting  overheads. 

Three  basic  formats  are  described  below  as  being  representative  of  the 
types  of  memory  organization  possible.  All  the  other  organizations  are  basic¬ 
ally  a  mixture  of  these  formats  optimized  by  taking  advantage  of  knowledge  of 
the  form  of  the  data. 

F i xed  Format 

The  most  straightforward  layout  is  the  fixed  format  where  all  the  data 
over  a  certain  fixed  time  interval  (frame)  is  recorded,  each  sample  variable 
being  identified  by  its  relative  position  within  that  frame  (Figure  4-18a). 
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FRAME  MARKER 


TIME 


I  DENT  1  PARAMETER  I 


I  DENT  4  PARAMETER  4 


LAST  I  DENT  LAST  PARAMETER 


FRAME  MARKER 


(c)  IDENTIFICATION  FORMAT 


1-18.  Possible  Data  Storage  Formats 
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In  order  to  ensure  the  start  of  the  frame  is  correctly  identified,  synchroni¬ 
zation  bits  are  usually  written  in  the  form  of  a  header.  Although  this  format 
is  simple  and  has  high  integrity  and  low  data  management  overheads,  compression 
will  only  be  achieved  if  no  parameter  within  the  frame  requires  storing. 

Variable  Format  and  Header 


If  a  variable  format  is  defined,  each  variable  can  no  longer  be  directly 
identified  by  its  relative  position  within  a  frame.  One  method  of  overcoming 
this  difficulty  is  to  associate  a  single  bit  with  each  value,  which  may  be 
stored  in  the  frame  (Figure  4— 1 8b ) .  If  a  sample  has  been  stored,  the  corres¬ 
ponding  bit  in  a  header  word  is  set.  If  the  sample  is  not  to  be  stored  (e.g., 
iT  was  removed  by  the  compression  algorithm),  the  appropriate  bit  is  set  to 
zero.  The  method  is  inefficient  for  high  compression  rates  and  large  variable 
sets  due  to  the  large  overhead  of  storing  a  relatively  long  header.  However, 
careful  grouping  of  the  data  into  groups  of  parameters  that  are  correlated 
and  use  of  headers  and  subheaders  may  be  used  to  overcome  this  difficulty. 

Variable  Format  and  Identification 


In  this  method  a  unique  identification  tag  is  associated  with  each 
value  (Figure  4-18c).  This  is  straightforward,  but  for  a  large  number  of 
variables  the  identification  word  becomes  long.  Again,  by  subdividing 
the  parameters  into  groups,  shorter  i dent i f i cat  ions  may  be  defined. 

Figure  4-19  provides  a  guide  to  the  overall  compression  ratio  achieved 
by  these  formats  assuming  that  only  a  certain  percentage  of  256  possible 
variables  in  a  frame  require  storage  (4- bit  delta  variables  have  been  assumed). 
Under  these  conditions,  the  fixed  frame  provides  no  compression,  the  variable 
format  with  identification  provides  the  best  compression  for  only  10  percent 
or  less  of  the  variables  requiring  storage  (i.e.,  a  compression  of  better 
than  10:1  from  the  algorithms),  otherwise  using  a  header  is  more  advantageous. 
The  crossover  point  varies  depending  on  the  actual  number  of  variables, 
their  precision,  and  the  way  in  which  the  data  might  vary,  but  the  general 
trend  is  the  same. 

A  tradeoff  of  these  factors  has  been  performed  to  define  a  format  for  the 
system  configurations  on  which  the  balance  of  the  study  is  based.  This  data 
format  is  shown  in  Figure  4-20.  The  basic  16-sec  frames  contain  the  synchroni¬ 
zation  markers,  the  unique  time  code,  and  the  parameter  origins  necessary  to 
ensure  that  they  are  self-contained  units  from  which  the  compressed  data  may 
be  reconstructed .  Each  frame  consists  of  sixteen  1-sec  subframes  of  delta- 
coded  information.  The  subframe  has  a  unique  time  code,  allowing  a  complete 
subframe  to  be  discarded  should  no  deltas  change  from  their  values  in  the  pre¬ 
vious  subframe.  The  first  subframe  (time  code  0000),  however,  is  always 
recorded  since  it  contains  the  full  precision  origins.  Within  each  subframe 
is  a  mixture  of  the  identification  (qroup)  and  header  codes.  In  the  same  way 
as  the  subframes,  if  none  of  the  deltas  within  a  group  change  from  their  pre¬ 
vious  recorded  values,  the  qroup  does  not  have  to  be  stored.  By  grouping 
correlated  parameters  foqether,  the  chance  of  being  able  to  discard  a  complete 
group  is  maxi  mi  zed  . 
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Figure  4-19.  Overall  Compression  for  Three  Basic  Formats 
Conclusion  on  Store  Format 


The  store  format  is  a  compromise  between  compression,  security,  and  flex¬ 
ibility.  However,  unless  great  care  is  taken  in  the  memory  organization,  any 
gain  achieved  by  the  compression  algorithms  could  be  lost,  resulting  in  data 
expansion.  The  proposed  format,  together  with  the  delta  encoding  technique, 
should  ensure  that  there  are  no  overheads  introduced  by  the  store  formatting. 

Audio  Recording 

A  bandwidth  of  3  kHz  is  considered  acceptable  for  adequate  intelligibility 
if  the  audio  recording  is  limited  to  speech.  If  the  analog  signal  is  band- 
limited  to  3  kHz  and  sampled  at  6  kHz  (the  Nyquist  rate),  then  a  data  rate  of 
72  Kbit/sec  would  be  obtained  from  a  12-bit  A/D  converter. 

By  use  of  nonlinear  encoding  (using  high  resolution  for  the  low  amplitude 
signals  and  reduced  resolution  for  high  amplitude  signals)  an  8-bit  analog-to- 
digital  conversion  could  be  used  without  significant  loss  of  information,  giv¬ 
ing  a  data  rate  of  48  Kbit/sec. 

Since  neighboring  values  will  show  a  significant  correlation,  each  sample 
could  be  more  economically  represented  by  a  difference  between  samples.  Four 
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Figure  4-20.  Proposed  Data  Format 
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bits  would  then  be  sufficient  to  represent  each  sample  giving  a  data  rate  of 
24  Kbit/sec.  However,  for  decoding  and  for  integrity  full  precision  values 
would  still  have  to  be  stored  at  regular  intervals,  increasing  this  data  rate 
s I ightl y. 

This  idea  is  taken  to  its  limit  in  delta  modulation  where  a  1-bit  dif¬ 
ference  is  used  to  code  the  signal.  In  the  basic  form  of  delta  modulation, 
the  sampling  rate  must  be  increased  by  a  factor  8  in  order  to  retain  adequate 
quality  (in  order  to  ensure  that  no  difference  is  greater  than  1  bit).  How¬ 
ever,  by  using  a  variable  step  size  that  increases  when  the  signal  is  changing 
rapidly  and  decreases  when  the  signal  is  varying  slowly,  the  data  rate  may  be 
significantly  reduced.  Such  continuously  variable  slope  delta  (CVSD)  modula¬ 
tors  are  currently  avai  table  in  LSI  technology  and  yield  data  rates  of  around 
10  Kbit/sec  for  reasonable  speech  quality. 

Vocoders  attempt  to  exploit  the  redundancy  in  the  speech  waveforms  by 
extracting  the  information  bearing  parameters  of  the  speech  signal.  These 
parameters  can  be  encoded  at  a  much  lower  rate  than  is  possible  using  the 
previous  techniques  without  serious  loss  of  intelligibility.  At  present, 
data  rates  of  2  to  3  kHz  are  possible  for  vocoders;  and  it  is  reasonable  to 
assume  that  these  figures  will  be  improved  in  the  near  future,  as  well  the 
technology  to  produce  the  circuitry  in  LSI  form.  Indeed,  for  the  inverse 
operation  of  speech  production  from  a  memory,  LSI  chips  are  already  available, 
requiring  data  rates  of  only  1200  bits/sec  in  order  to  drive  them. 

An  important  reservation  must  be  made,  however,  relative  to  vocoders. 

Unlike  the  CVSD  and  other  direct  encoding  techniques,  vocoders  are  tailored 
to  human  speech  patterns.  Therefore,  they  will  not  be  effective  in  reproduc¬ 
ing  other  mechanical  noises  in  the  cockpit.  These  noises  have  sometimes 
been  crucial  in  determining  actual  accident  causes.  For  this  reason, 
compression  below  CVSD  rates  of  10  Kbit/sec  will  result  in  a  loss  of  data. 

Figure  4-21  illustrates  the  memory  and  recording  time  relationships 
for  the  various  encoding  methods  discussed  above.  With  silence  editing, 
the  recording  time  could  be  approximately  doubled  assuming  equal  voice/ 
unvoiced  periods. 

STORAGE  TECHNOLOGY 

Storage  technology  is  very  diverse  with  different  storage  methods  developed 
for  different  applications.  This  review  deals  with  those  techniques  partic¬ 
ularly  applicable  to  this  study. 

Digital  data  can  be  stored  in  many  forms,  but  in  general  fall  into  two 
c I  asses: 


Vo  I  at i le — Contents  are  lost  when  power  is  removed. 
Nonvolati le — Retains  contents  when  power  is  removed. 
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12  BIT  A/0  NONLINEAR  DELTA  CONTINUOUSLY  VOCODERS 

PCM  ENCODING  MODULATION  VARIABLE  SLOPE 

DELTA  MODULATION 


DATA  RATE,  KBIT/SEC 
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Figure  4-21.  Data  Rate  vs  Recording  Time 

for  Various  Audio  Technologies 

For  the  purposes  of  a  CSFDR,  the  memory  module  must  satisfy  the  following 
cond i t ions : 

•  Data  retained  under  crash  conditions 

•  Cost  effective 

•  Smal I 

•  Lightweight 

•  Rel iabl e 

•  Low  power 

Battery  backed-up  volatile  memories  were  considered  but  rejected  because 
of  the  nonavailability  of  a  suitably  reliable  battery,  for  the  conditions  on 
a  combat  aircraft  and  those  resulting  from  a  crash.  The  nonvolatile  storage 
technologies  that  will  be  considered  are  as  follows: 

•  Semiconductor 

•  Magnetic  bubbles 
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Plated  wire 


•  Magnetic  tape 

•  Optical  systems 


•  Magnetic  disc 

•  Magnetic  core 

In  the  past,  either  magnetic  tape,  magnetic  wire,  or  electromechanical 
scribing  methods  have  been  used  to  record  aircraft  data.  With  the  advent  of 
nonvolatile  semiconductor  memories,  advanced  optical  memory  systems,  and  mag¬ 
netic  disc  memories,  it  is  necessary  to  review  these  new  technologies  against 
existing  storage  media  and  assess  which  would  be  the  most  suitable  for  an 
advanced  CSFDR  system. 


Semiconductor  Memory  Systems 

Semiconductor  memory  technology  falls  into  two  main  categories — metal 
oxide  semiconductor  (MOS)  and  bipolar.  The  first  semiconductor  memories 
built  utilized  bipolar  technology.  This  provided  h i gh-per formance  systems, 
which  were  mainly  used  for  smaller  cache  memory  applications.  The  main  draw¬ 
backs  of  bipolar  memory  technology  are  that  the  transistor  geometries  are  large, 
giving  low-density  devices,  and  the  power  consumption  is  high.  The  need  for 
lower  power  consumption  led  to  the  development  of  MOS  memories,  which  give 
high-density,  low-power,  low-cost  devices  but  with  an  increased  access  time. 

For  the  purposes  of  a  CSFDR,  access  time  is  not  a  limiting  factor  since  even 
for  uncompressed  data  the  maximum  rate  is  2  Kbit/s,  and  the  advantages  offered 
by  MOS  technology  make  it  an  attractive  solution. 


Bipolar  Memory  Systems 

The  storage  element  in  a  bipolar  memory  is  the  epitaxial  transistor,  which 
is  small  and  has  a  fast  switching  speed  due  to  its  high  transconductance.  The 
main  drawback  of  the  epitaxial  transistor  is  its  low  input  impedance,  which 
results  in  high  power  consumption.  This,  together  with  the  fact  that  all 
bipolar  memories  are  volatile,  makes  them  unsuitable  for  use  as  a  storage 
media  in  a  crash  survivable  system. 

Only  one  type  of  bipolar  memory  technology,  integrated  injection  logic 
(I^L),  comes  close  to  MOS  memories  in  terms  of  cost,  density,  and  performance. 
This  is  a  relatively  new  technology  that  still  results  in  a  volatile  memory, 
and  it  is  not  yet  available  in  a  suitably  dense  configuration. 


MOS  Memory  Systems 

MOS  memories  are  based  on  the  metal  oxide  silicon  field  effect  transistor 
(MOSFET).  These  devices  are  available  in  both  dynamic  and  static  forms.  In  a 
dynamic  device,  the  data  is  stored  as  a  charge  on  a  diffused  capacitor;  charge 
is  trapped  and  provides  a  voltage  bias,  which  turns  off  the  MOSFET.  Due  to 
the  fact  that  the  leakage  impedance  of  the  storage  capacitor  is  finite,  the 
charge  will  slowly  leak  away  and  must  be  replenished  periodically. 


AIRESFARCH  MANUFACTURING  COMPANY 


81-17693 
Page  4-33 


Static  memories,  however,  store  data  by  holding  a  transistor  either  on 
or  off  rather  than  as  a  charge  and  will  thus  maintain  this  state  indefinitely 
while  the  device  is  powered.  Static  memories  consume  more  power,  are  slower, 
and  are  less  dense  than  the  dynamic  types.  The  following  MOS  memory  types  are 
avai (able: 


PMOS  (P-channel  MOS) — This  is  the  oldest  of  the  MOS  technologies,  and 
the  main  drawback  is  that  it  requires  multiple  power  supplies. 

NMOS  (N-channel  MOS) — NMOS  was  developed  to  overcome  the  low  speed  and 
multiple  supplies  required  by  PMOS.  The  resulting  devices  can  operate 
on  a  single  5  v  supply  and  are  much  faster  than  the  equivalent  PMOS 
device  due  to  the  much  higher  carrier  mobility. 

CMOS  (Complementary  MOS) — CMOS  memories  use  both  NMOS  and  PMOS  junc¬ 
tions  to  produce  a  device  with  very  low  power  dissipation  and  low 
operating  voltage  (a  CMOS  device  can  operate  with  a  supply  voltage 
down  to  1.5  v,  which  makes  it  very  attractive  for  use  with  a  battery 
to  create  a  nonvolatile  store).  CMOS  speeds  are  generally  low  compared 
to  NMOS  and  if  high  speeds  are  required,  then  higher  supply  voltages 
need  to  be  used.  Although  CMOS  is  essentially  a  volatile  storage  tech¬ 
nology,  nonvolatile  CMOS  memories  will  soon  be  available  from  Hughes 
Aircraft  with  a  maximum  density  of  8  Kbit  (1024  x  8).  These  devices 
are  very  fast,  have  a  data  retention  time  of  10  years  at  100°C,  and 
an  endurance  of  10^  erase/write  cycles,  which  is  satisfactory  for  the 
current  requirement.  This  makes  the  device  suitable  for  the  construc¬ 
tion  of  a  solid-state  CSFDR;  however,  for  a  capacity  of  1  MBIT, 
approximately  125  devices  would  be  required.  This  large  number  of 
devices  would  lead  to  an  unreliable  and  large  system,  so  until  larger 
CMOS  memories  are  available,  this  technology  does  not  offer  an  effec¬ 
tive  solution. 

SOS/MOS  (silicon  on  sapphire  MOS) — This  memory  technology  was  devel¬ 
oped  to  produce  a  fast,  low-power,  high-density  memory.  The  resulting 
devices  have  very  high  immunity  to  radiation,  which  makes  them  useful 
for  military  combat  environments  but  at  the  present  time  they  are 
expensive  and  no  high-density  nonvolatile  memories  are  likely  to  be 
avai lable. 

CCD  Memory  Systems 

The  charge  coupled  device  (CCD)  memory  consists  of  a  series  of  charge- 
coupled  shift  register  loops.  Data  is  represented  by  the  absence  or  presence 
of  a  charge  and  in  order  to  stop  the  charge  from  leaking  away,  the  data  is 
sensed  and  regenerated  by  a  continuous  series  of  shift  pulses. 

CCD  technology  allows  very  low-power  serial  access  memories  to  be  con¬ 
structed,  but  the  fact  that  they  are  volatile  makes  them  unsuitable  for  the 
CSFDR  project. 
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Metal  Nitride  Oxide  Semiconductor 


The  metal  nitride  oxide  semiconductor  (MNOS)  process  is  used  to  produce 
electrically  alterable  read  only  memories  (EAROM's),  block  oriented  random 
access  memories  (BORAM's),  and  line  addressable  random  access  memories 
(LARAM's).  The  data  given  below  applies  to  all  these  devices.  MNOS  was  devel¬ 
oped  to  overcome  the  volatility  shortcomings  of  MOS  memories,  and  fhe  resulting 
device  is  both  fast  and  nonvolatile. 

Data  is  stored  as  a  charge  in  the  interface  layer  between  the  silicon 
nitride  and  silicon  dioxide  interface.  The  presence  of  this  charge  lowers 
the  threshold  voltage  of  the  sense  transistor  so  that  when  it  is  interrogated 
the  storage  transistor  turns  on.  If  the  charge  is  not  present,  then  the 
transistor  does  not  turn  on  when  interrogated. 

These  trapped  charges  are  quite  stable  and  will  remain  at  a  determinate 
level  for  up  to  10  years.  Figure  4-22  shows  the  decay  of  the  positive  and 
negative  threshold  levels  with  respect  to  time,  and  it  can  be  seen  that  the 
threshold  window  remains  for  at  least  3  x  10®  sec  (10  years). 

Alteration  of  the  contents  of  an  MNOS  memory  cell  differs  from  conventional 
R/W  memories  in  that  the  old  contents  must  first  be  erased,  and  then  the  new 
contents  written  to  the  cell.  This  leads  to  a  lengthly  double  write  cycle  if 
the  cell  has  previously  been  written  to,  and  this  can  lead  to  a  write  time  in 
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Figure  4-22.  Typical  Retention  Prediction  Plot  for  GI3400 
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the  region  of  hundreds  of  milliseconds.  The  reason  for  this  lengthy  write  time 
(and  erase  time  as  erase  is  simply  to  write  all  zeros),  is  that  in  order  to  store 
large  enough  charge  to  last  10  years  or  more,  the  stored  charge  must  be  rela¬ 
tively  large. 

The  decay  rate  of  the  trapped  charge  is  dependent,  not  only  on  the 
leakage  rate  within  the  device  but  also  on: 


•  The  device  temperature 

•  The  ambient  radiation  levels  in  which  the  device  is  operating 

•  The  number  of  erase/write  cycles  that  the  particular  memory  cell  has 
been  subjected  to 


The  charge  decay  rate,  being  a  direct 
cycles  that  the  cell  has  been  subjected  to, 
since  it  will  not  then  retain  its  data  for 
indication  of  the  charge  decay  rate  after  1 
cycles,  and  it  can  be  seen  that  the  device 
life  after  10^  erase/write  cycles.  This  fi 
all  MNOS  devices  due  to  the  erosion  of  the 
the  charge.  If  the  layer  is  made  thicker, 
the  amount  of  charge  needed  to  be  stored  wi 
erase  time  longer.  The  thickness  of  the  ox 
write  time  tradeoff. 


function  of  the  number  of  erase/write 
limits  the  useful  I i fe  of  the  device 
a  useful  time.  Figure  4-23  gives  an 
,  1C>4,  3  x  10^,  and  10^  erase/write 
is  approaching  the  end  of  its  useful 
gure  shows  a  basic  limitation  of 
oxide  layer  that  is  used  to  store 
then  the  life  will  be  longer,  but 
II  be  larger  and  hence  the  write  and 
ide  layer  therefore  is  an  endurance/ 


TIME  FROM  BEG  INKING  OF  WRITE,  SEC 
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Figure  4-23. 


Endurance  of  GI3400  (Relatively  Thin  Nitride) 
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BORAM’s  are  produced  by  Sperry-Uni vac  and  Wes+inghouse  Defense  and  Electronic 
Systems  Center.  The  devices  manufactured  by  Sperry-Un i vac  are  not  available  to 
other  contractors  and  will  not  be  considered  further. 

The  devices  manufactured  by  Westinghouse  (8  Kbit  at  present)  are  only 
available  packaged  into  a  module  and  not  as  individual  units.  Multichip  hybrid 
microcircuits  are  produced  with  16  devices  in  a  package.  This  package  is  then 
incorporated  with  the  necessary  control  circuitry  in  a  memory  module.  The  avail¬ 
ability  of  increased  capacity  modules  is  predicted  by  Westinghouse  and  shown 
be  low: 


Year 

Device  Capacity 

Module  Capacity 

Present 

8  Kbit 

131  Kbit 

Late  1981 

32  Kbit 

0.5  Mbit 

Late  1983 

131  Kbit 

2  Mbit 

Westinghouse  is  not  a  major  semiconductor  house  and  is  selling  its 
proprietary  BORAM  devices  into  a  limited  number  of  programs.  The  indication 
therefore  is  that  the  device  prices  will  not  fall  as  fast  as  those  from  major 
semiconductor  houses  (e.g.f  The  Intel  Corporation  E^PROM  described  below).  It 
seems  unlikely  that  a  second  source  will  be  available. 

In  an  attempt  to  overcome  the  long  write  time  and  low  density  penalties 
associated  with  MNOS  memories,  the  Intel  Corporation  has  developed  an  advanced 
MOS  process,  which  has  been  named  HMOS-E.  This  will  be  described  in  the 
following  section. 

Intel  HMOS-E  Process 


The  HMOS-E  process  was  developed  by  the  Intel  Corporation  to  produce  the 
floating  gate  tunnel  oxide  (FLOTOX)  nonvolatile  memory  cell.  Unlike  the  MNOS 
memories  previously  described,  which  rely  on  charge  storage  within  a  nitride 
layer,  the  Intel  device  relies  on  charge  storage  on  a  floating  gate  of  poly¬ 
silicon.  The  advantages  of  this  process  are  based  on  the  fact  that  the  float¬ 
ing  gate  can  be  made  very  small.  This  means  that: 

(a)  A  very  dense  device  can  be  produced. 

(b)  Because  the  electrons  have  to  tunnel  through  an  oxide  layer  only 
200  A  thick  to  reach  the  floating  gate,  the  resulting  device  is 
very  fast  (300  ns  maximum  access  time  for  an  MIL-STD  device). 

(c)  The  device  has  excellent  data  retention  characteristics  over  a  wide 
temperature  range.  The  device  will  retain  its  data  for  20  years  at 
125°C  with  an  absolute  maximum  data  retention  threshold  of  around 

1 50°C. 
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(d)  There  is  no  limit  to  the  number  of  times  a  memory  cell  can  be  read; 
unlike  MNOS,  which  has  a  read  limit  of  around  2  x  10"  before  a 
refresh  is  required. 

The  HMOS-E  E^PROMS  presently  available  are  16  K  (2  K  x  8)  dual-in-line  pack¬ 
aged,  commercial  temperature  range  devices.  It  is  predicted  that  by  m id-1981 
MIL-STD  versions  will  be  available.  Chip  carrier  versions  for  high-density 
memory  systems  should  be  available  by  late  1981. 

Higher  density  devices  are  under  development,  with  a  64  K  device  scheduled 
for  release  in  1983  or  1984  and  a  131  K  device  using  an  enhanced  HMOS-E  process 
available  around  1985.  Other  companies  are  likely  to  follow  the  lead  taken  by 
Intel  in  producing  an  EEPROM  that  is  pin  compatible  with  the  industry  standard 
2  K  x  8  EPROM,  and  this  will  ensure  a  second  source  for  the  device. 

EBAM  Memory  Systems 

Electron  beam  addressable  memory  (EBAM)  or  beam  addressable  MOS  (BEAMOS) 
memory  systems  were  developed  for  mainframe  computer  applications  where  it  is 
desirable  to  have  a  large,  low  cost  per  bit  and  fast  access  memory.  The  actual 
storage  medium  is  an  unstructured  semiconductor  plane,  and  each  memory  bit  is 
accessed  using  an  electron  beam.  The  semiconductor  storage  planes  are  mounted 
in  small  cathode  ray  tubes,  and  the  addressing  is  accomplished  by  deflecting 
the  beam. 

The  disadvantages  of  this  new,  unproven  technology  are  that  the  CRT's  are 
bulky  and  require  costly  beam  deflection  circuitry  and  power  supplies.  Further¬ 
more,  the  very  fast  access  speeds  attainable  with  this  form  of  memory  are  not 
specifically  required  for  the  CSFDR.  The  nature  of  the  memory  means  that  it 
would  be  very  difficult  to  crash  protect. 

Optical  Memory  Systems 

Optical  memories  were  developed  for  mainframe  computer  mass  storage  appli¬ 
cations.  The  storage  medium  is  a  holographic  plane  that  is  interrogated  using 
a  laser.  A  very  large  amount  of  data  can  be  stored  in  this  way,  but  it  is  very 
bulky  and  susceptible  to  vibration.  This  is  a  new  technology  and  has  not  yet 
been  proven  in  the  field,  but  it  is  unlikely  to  suit  the  CSFDR  application  as 
the  fast  access  and  very  dense  storage  are  not  prime  requirements.  The  prob¬ 
lems  involved  in  designing  such  a  system  that  would  operate  in  an  aircraft 
environment  and  survive  a  crash  are  severe. 

Bubble  Memory  System 

Bubble  memory  technology  was  first  discovered  in  1967,  and  the  first  devices 
were  available  in  1975  with  a  capacity  of  16  Kbit.  Today,  the  state-of-the-art 
device  has  a  capacity  of  1  Mbit  and  a  4-Mbit  device  is  expected  to  appear  in 
1982  or  1983. 

In  a  bubble  memory,  data  is  represented  by  magnetic  bubbles,  which  are  pro¬ 
duced  in  a  film  of  magnetic  material  that  has  been  epitaxially  grown.  An 
external  magnetic  field  is  applied  to  the  magnetic  substrate,  and  this  causes 
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the  magnetic  bubbles  to  line  up  with  the  field  along  a  single  axis.  Data  is 
represented  by  the  presence  or  absence  of  the  magnetic  bubbles. 

In  order  to  access  a  particular  location  in  the  memory,  the  magnetic 
bubbles  are  shifted  around  within  the  magnetic  substrate.  This  is  achieved  with 
islands  of  soft  magnetic  material  deposited  on  the  magnetic  film  and  by  applying 
a  rotating  drive  field.  The  magnetic  polarities  of  these  islands  shift  around 
in  cadence  with  the  rotating  magetic  field,  and  this  steers  the  bubbles  from 
island  to  island. 

Within  each  magnetic  bubble  memory,  the  bubbles  are  rotated  in  major 
and  minor  loops  and  at  a  specific  location  in  the  loops  data  is  read  or 
written.  In  order  to  read  data  from  a  bubble  memory,  it  is  necessary  to  sense 

the  presence  or  absence  of  a  bubble,  and  this  is  done  by  stretching  the  bubble 

and  then  passing  it  under  a  permal loy  magneto-resistive  detector.  The  change 
of  impedance  within  the  detector  is  sensed  and  amplified,  and  this  signal  is 
fed  to  the  read  electronics.  The  writing  of  data  is  accomplished  by  using  a 
small  current  loop.  If  a  particular  bubble  is  brought  under  the  current  loop, 
bubbles  can  be  created  by  applying  a  pulse  of  current  in  opposition  to  the 

memory's  static  bias  field.  Similarly,  if  current  is  pulsed  in  the  same  sense 

as  the  bias  field,  bubbles  can  be  annihilated  or  erased. 

Because  data  is  represented  by  a  magnetic  rather  than  an  electric  signal, 
the  bubble  memory  is  a  nonvolatile  medium  and  its  contents  are  retained  vir¬ 
tually  indefinitely  under  normal  conditions.  However,  just  as  a  permanent 
magnetic  loses  its  strength  when  heated  or  shocked,  bubble  memories  can  lose 
their  contents  under  the  same  conditions.  The  temperature  sensitivity  of  a 
particular  bubble  memory  can  be  controlled  by  suitable  selection  of  the 
materials  involved  in  the  manufacture  of  the  magnetic  garnet  material,  and, 
in  general,  an  80°C  span  is  possible  with  limits  of  -20°  to  +80°C.  This  makes 
the  use  of  bubble  memories  for  a  military  environment  limited  without  bulky  and 
expensive  environmental  conditioning  equipment.  Also,  extreme  shock  can  cause 
data  in  a  bubble  memory  to  be  lost.  It  is  therefore  desirable  to  protect  the 
memory  in  a  module  against  the  severe  shock  levels  experienced  in  a  crash,  and 
this  causes  an  increase  in  protection  hardware. 

Despite  these  shortcomings,  however,  the  bubble  memory  has  advantages  for 
data  recording  and  with  4-Mbit  devices  available  soon  it  will  be  possible  to 
produce  a  compact  high-density  recording  module  for  use  in  a  limited  environment 
only,  probably  for  systems  in  which  the  memory  is  not  exposed  to  high  shock 
I evel s . 


Magnetic  Core  Systems 


Magnetic  core  memories  were  first  developed  for  use  as  program  storage  in 
mainframe  and  mini-computers.  They  are  now  available  in  compact  modules  for  use 
over  the  temperature  range  -55°  to  +105°C  and  are  used  typically  for  computer 
program  and  data  storage.  However,  the  high  power  consumption  and  manufacturing 
cost  together  with  complex  drive  electronics,  loss  of  data  at  temperatures  above 
)05#C,  and  large  size  make  magnetic  core  memories  unsuitable  for  use  as  a 
storage  media  in  a  CSFDR. 


AIRESEARCH  MANUFACTURING  COMPANY 


81-17693 
Page  4-39 


Plated  Wire  Memories 


Plated  wire  memories  were  developed  as  a  h i gh-performance  magnetic  core 
substitute.  They  provide  the  same  sort  of  performance  as  magnetic  core,  but 
with  better  radiation  immunity  and  higher  speed  at  the  expense  of  cost.  This 
makes  the  use  of  plated  wire  memories  unsuitable  for  the  CSFDR  application. 

Magnet i c  D i scs 

Magnetic  discs  were  first  developed  as  a  successor  to  the  magnetic  drums 
that  were  used  on  the  first  computers.  Today  discs  are  still  used  as  an 
online  data  source  for  mainframe  computers,  and  a  derivation  of  the  original 
rigid  (or  hard)  disc  has  been  the  floppy  disc.  This  is  available  in  either  the 
5- in.  (mi n i -f loppy )  or  the  8- in.  floppy  format.  Both  are  widely  used  for  pro¬ 
gram  and  data  storage  on  mini-computers  and  development  systems.  Typical 
capacities  of  the  f  loppy  disc  are  1.2  Mbyte  for  the  8- in.  version  and  500  kByte 
for  the  5-1/4- in.  version. 

While  the  floppy  disc  forms  a  convenient,  cheap,  and  reliable  data  storage 
media  for  commercial  use,  it  has  not  been  exploited  for  military  use.  This  is 
due  to  the  fact  that  the  storage  medium  is  difficult  to  protect  from  the  adverse 
military  environment,  and  the  disc  drive  is  susceptible  to  the  vibration  and 
shock  levels  found  in  most  military  applications. 

A  recent  development  of  the  rigid  disc  has  been  the  Winchester  technology 
disc,  which  is  gaining  popularity  for  mass  storage  of  data  on  mini-  and  micro¬ 
systems.  This  disc  is  available  in  5-1/4-in.,  8-in.,  or  14-in.  formats  with 
capacities  of  2  MByte,  10  MByte,  and  700  MByte,  respectively.  The  drives 
employ  single  or  multiple  discs  and  a  moving  low-mass  head  in  a  sealed  environ¬ 
ment.  Because  the  disc  is  not  removable  and  the  environment  is  sealed,  a  very 
high  density  is  possible  with  low  error  rate  and  this  makes  the  medium  ideally 
suitable  for  large  quick-access  data  bases.  One  small  airborne  2.5-MBit  disc 
memory  system  is  presently  available.  The  disc  unit  itself  is  9  by  6  by  5  in. 
and  weighs  9  lb,  but  because  of  the  expense  of  making  the  system  perform  over 
the  military  temperature  range,  the  system  is  very  expensive,  with  just  the 
disc  drive  alone  costing  $7,000  to  $10,000.  For  this  reason,  and  the  fact  that 
the  very  fast  access  times  are  not  required,  the  disc  drive  is  not  suitable  for 
the  CSFDR. 

Magnetic  Tape 

Maqnetic  tape  is  a  most  attractive  storage  media  for  the  CSFDR  appl i ca¬ 
tion.  Magnetic  tape  has  been  used  for  recording  crash  data  on  military  and 
commercial  aircraft  for  many  years  and  has  the  advantage  that  it  is  a  proven 
technology.  With  careful  selection  of  the  tape  material  and  the  protective 
case,  a  recorder  can  be  made  that  will  survive  the  high  temperatures  and 
shocks  associated  with  a  crash,  and  have  a  large  enough  capacity  to  be  able 
to  record  all  the  crash  data,  both  parametric  and  audio,  for  any  reasonable 
duration  several  hours  before  the  crash. 
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Cassette  and  Cartridge  Recorders 


Magnetic  tape  in  either  1/4  in.  or  1/2  in.  widths  can  be  packed  into 
cassettes  or  cartridges  to  provide  a  self-contained  removable  storage  medium. 
This  system  is  often  used  in  applications  requiring  the  removal  of  data  from 
an  aircraft  after  each  flight;  for  example,  maintenance  and  performance  moni¬ 
toring.  The  disadvantages  of  cassette  and  cartridge  recording  systems  are  that 
the  manufacturing  tolerances  of  the  interchangeable  cassettes  can  affect  the 
tape  guidance,  and  the  tape  environment  is  not  controlled,  which  does  give  an 
inherent  increase  in  error  rate. 

Another  form  of  magnetic  tape  recording  is  the  continuous  loop  system. 

This  offers  continuous  recording  of  data  so  that  at  any  given  time  the  recorder 
holds  approximately  30  min  of  data.  The  design  of  such  a  recorder  is  critical 
in  order  to  achieve  correct  tape  guidance  in  a  harsh  environment,  and  only  a 
few  manufacturers  have  succeeded  in  producing  a  successful  design. 

Reel-to-Reel  Recorders 


Reel-to-reel  magnetic  tape  recorders  have  been  used  for  several  years  to 
record  data  and  voice  on  aircraft.  They  appear  in  many  forms  and,  depending 
on  the  exact  application,  tape  width,  number  of  tracks,  tape  speed,  tape  length, 
tape  material,  and  data  rate,  can  all  be  varied  to  suit  the  specific  applica¬ 
tion.  Reel-to-reel  recorders  are  currently  used  for  crash  and  maintenance 
recording  and  have  a  typical  capacity  of  the  order  of  15  M3it.  Recorders  for 
civil  transport  aircraft,  built  to  ARInIC  573,  have  a  capacity  of  70  Mbit.  The 
data  rate  can  be  fixed  or  variable  depending  on  the  incoming  data  rate,  and 
analog  data  can  be  mixed  with  the  digital  data  on  different  tracks. 

The  magnetic  tape  recorder  is  a  flexible,  high  capacity,  serial  recording 
device.  The  development  and  production  of  a  relatively  low-cost  tape  transport 
for  this  application,  which  would  have  an  MTBF  of  over  4000  hr  and  would  meet 
the  size  and  weight  constraints,  would  offer  very  little  technology  risk. 

For  the  purpose  of  a  crash  data  recorder,  the  capacities  offered  by  a 
magnetic  recorder  are  large.  A  solid-state  memory  can  be  a  more  cost  effec¬ 
tive  solution,  depending  on  the  data  capacity  required  (which  is  dependent  on 
the  system  configuration)  and  on  the  in-service  timescales.  However,  if  main¬ 
tenance  data  is  required,  the  high  capacity  NGL1203V000  transport  magazine 
provides  an  excellent  solution.  This  unit  is  installed  on  the  F-18A  Hornet  and 
has  a  calculated  MTBF  of  over  4000  hr.  To  date,  no  failures  have  been  reported 
in  over  3000  flight  hr.  The  cost  is  0.1  cent  per  bit  for  the  tape  transport, 
together  with  its  e 1  '■'rtron i cs,  and  about  0.05  cent  per  bit  for  the  tape  trans- 
por  t  on  I  y . 
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a  crash,  has  first  to  prevent  the  storage  medium  from  degrading  during  the 
impact.  This  impact  can  cause  high  shock  levels  and  the  likelihood  of  gene¬ 
ration  by  aircraft  structural  members.  This  can  then  be  followed  by  a  fire 
or  an  immersion  in  fluids  likely  to  be  found  within  an  aircraft  or  used  in 
fire  fighting. 


Subsequent  to 
data  extracted  for 
module  is  required 
any  self-generated 


the  crash  the  memory  module  has  to  be  recovered  and  the 
analysis.  During  normal  flight  operation  the  storage 
to  operate  in  an  inaccessible  part  of  the  aircraft  and 
heat  should  not  degrade  the  memory. 


Several  methods  have  been  employed  to  protect  crash  recorders, 
of  these  provide  an  external  armor  plate,  to  withstand  any  crushing 
penetration  forces.  Within  this  armor  plate  the  thermal  protection 
3/4- in .-th i ck  insulation  material  or  a  thin  thermal  insulant  with  a 
sink  inside.  This  heat  sink  jacket  contains  a  material  that  melts 
The  memory  module  is  then  secured  within  this  enclosure. 


The  majority 
and 

is  either 
heat 

or  vaporizes. 


Other  units  have  been  manufactured  utilizing  a  container  formed  from 
an  ablative  compound.  This  compound  provides  both  mechanical  and  thermal 
protect i on . 

During  the  course  of  this  study  the  latest  technologies  have  been 
investigated,  particularly  those  for  thermal  protection.  Information  was 
obtained  on  the  latest  ablative  materials  designed  for  use  as  heat  shields; 
on  intumescent  coatings,  which  is  a  relatively  new  technology;  and  on  thermal 
insulation  materials. 

In  the  past,  Norma  I  a i r-Garrett  Limited  has  designed  and  built  crash  pro¬ 
tected  recorders  utilizing  both  thermal  insulants  and  ablative  compounds  as 
the  thermal  protection.  The  design  of  a  protection  system  utilizing  a  heat 
sink  of  a  material  that  melts  or  vaporizes  is  fairly  straightforward  but  the 
use  of  intumescent  coatings  for  thermal  protection  is  more  complex. 

So  that  we  could  fully  understand  the  problems  associated  with  the  use 
of  an  intumescent  coating  that  is  applied  on  the  outside  of  any  crash  protected 
enclosure  and  as  such  requires  to  withstand  any  penetration  force,  it  was 
decided  to  carry  out  tests  on  a  representative  case. 

Although  subsequent  information  indicates  a  shorter  fire  test  might 
be  applicable,  tests  were  carried  out  to  the  TS0C51a  requirement  for  both 
the  penetration  and  fire.  The  results  are  shown  in  Figures  4-24,  4-25,  and 
4-26.  Appendix  J  provides  further  details. 

Thermal  insulators  for  this  type  of  application  utilize  the  extremely 
low  thermal  conductivity  of  air.  They  consist  of  porous  materials  that 
have  low  mechanical  strength,  rhe  air  being  trapped  within  each  of  the  cells. 

If  crushed  they  lose  most  of  their  insulating  properties.  Figure  4-27  shows 
typical  conductivities  for  high-temperature  insulation. 


r 
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PENETRATION  RESISTANCE: 

TESTING  CARRIED  OUT  ON  2  SEPARATE  CASES 
MANUFACTURED  FROM  0.080  IN.  THICK  STAINLESS 
STEEL  (18-8),  WITH  EXTERNAL  TESTING  SURFACE 
COATED  WITH  0.180  IN.  THICK  INTUMESCENT 
COATING. 


Figure  4-24.  Testing  Penetration  Resistance 

FIRE  TEST 

A  FIRE  TEST  WAS  CARRIED  OUT  ON  THE 
DAMAGED  SURFACE  OF  TEST  CASE  NO.  2 


BUTANE 

BURNER 


a  non 


Figure  4-25.  Fire  Test 
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RATURE 


The  latest  ablative  materials  were  developed  for  use  with  heat  shields 
of  space  vehicles.  An  ablative  material  protects  the  unit  contained  within 
from  the  effects  of  a  fire  by  charring.  In  charring  heat  is  absorbed,  and  the 
heat  absorbed  is  proportional  to  the  weight  lost. 


I ntumescent  materials  designed  for  protection  from  hydrocarbon  fires 
are  stable  materials  until  attacked  by  fire.  The  material  then  swells  against 
the  heat  source,  and  the  surface  erupts  to  reflect  and  radiate  the  heat  back 
( see  F igure  4-28)  . 

Tables  4-4  and  4-5  give  calculated  temperatures  of  a  steel  plate  coated 
with  an  i ntumescent  material  when  subjected  to  fire. 


1100°c 


PROTECTED 
STAINLESS 
STEEL  OUTER 
AVA  SHELL 


ABLATIVE  ZONE 

CHAR.  REFLECTIVE  RADIATION 
ACTIVE  EXPANDING  HEAT  ABSORBING  CHAR. 


PASSIVE  LAYER 
ACTIVE  LAYER 

ACTIVE  REGRESSIVE  ENERGIZED  CHAR. 

A13856 


Figure  4-28.  I ntumescent  Coating  Breakdown 


AIRESEARCH  MANUFACTURING  COMPANY 


81-17693 
Page  4-46 


TABLE  4-4 


TEMPERATURE  OF  2-MM  STEEL  COVERED  BY  FIREC  INTUMESCENT 
(AFTER  15  MIN  FLAME  TEMPERATURE  1200°C) 


FIREC 

1  ntumescent 
Thickness,  mm 

Steel 

Temperature,  °C 

1.0 

425 

1 .5 

375 

2.0 

340 

2.5 

320 

3.0 

300 

TABLE  4-5 

TEMPERATURE  PROFILE  OF  2-MM  STEEL  COVERED  BY  1-MM  FIREC 
INTUMESCENT  (FLAME  TEMPERATURE  1200°C) 


Time, 

0 

1 

2 

3 

4 

5 

10 

15 


M  i  n 


Steel 

Temperature, 


20 

225 

275 

295 

310 

325 

385 

425 


°C 
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SECTION  5 


TECHNOLOGY  TRADEOFFS 


DATA  STORAGE  REQUIREMENTS 
Configurations  I  and  II 

The  information  gathered  from  accident  investigation  authorities  indicated 
a  range  of  data  storage  durations.  The  times  required  were  dependent  upon  whether 
preflight  and  takeoff  data  is  recorded  and  maintained  in  the  store  for  the  entire 
flight.  A  range  of  compression  ratios  is  indicated  in  Section  4. 

Using  the  parameter  lists,  accuracies,  and  resolutions  from  Table  3-2,  a 
range  of  data  storage  requirements  can  be  generated,  as  shown  in  Table  5-1. 

Table  5-1  includes  the  requirements  for  audio  recording  for  both  analog  and 
digital  recording  methods.  The  capacity  requirements  for  digital  recording  of 
audio  assumes  the  use  of  continuously  variable  slope  delta  modulation  (CVSD), 
with  a  data  rate  of  8  Kbit  per  sec. 


TABLE  5-1 

RANGE  OF  DATA  STORAGE  REQUIREMENTS 


Parametric  Data 

Audio 

mm 

MH 

Compres- 

Data 

Ana  1 og 

S i 1 ence 

Conf ig- 

si  on 

Capac- 

Storage 

Record i ng 

Editing 

Data 

uration 

QEfti 

Rat  io 

ity 

T  i  me 

Duration 

Rat  io 

Capacity 

15  min 

10 

180  Kbit 

10  min 

10  min 

1 

4.8  Mbit 

1 

5 

360  Kbit 

4 

1.2  Mbit 

1  hr 

10 

720  Kbit 

30  min 

30  min 

1 

14.4  Mbit 

5 

1440  Kbit 

4 

3.6  Mbit 

15  min 

8 

110  Kbit 

10  min 

10  min 

1 

4.8  Mbit 

1  1 

4 

225  Kbit 

4 

1.2  Mbit 

1  hr 

8 

450  Kbit 

30  mi n 

30  mi  n 

1 

14.4  Mbit 

4 

900  Kbit 

4 

3.6  Mbit 

Table  5-1  has  been  derived  using 
In  order  to  maintain  the  accuracy  and 
compression  algorithms  would  be  used, 
of  2  compression  would  immediately  be 


the  following  compression  algorithms, 
information  of  the  raw  data,  reversible 
By  use  of  delta  coding  techniques  a  factor 
available  including  the  penalty  for  the 


requirement  to  store  full  precision  values  at  regular  intervals 
able  to  reconstruct  the  signal  and  to  ensure  data  integrity. 


in  order  to  be 
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With  a  zero-order  prediction  algorithm  a  further  factor  of  2  compression 
on  signals  that  are  rapidly  varying  and  a  factor  10  on  those  that  are  changing 
slowly  would  be  possible.  If  it  is  assumed  that  not  all  signals  will  fluctuate 
rapidly  at  the  same  time  but  that  the  available  compression  will  be  the  average 

of  these  two  extremes,  a  factor  6  is  achievable.  The  zero-order  predictor 

represents  a  very  small  overhead  in  processing  requ irements,  the  main  penalty 
being  in  the  necessity  for  a  variable  store  format.  Such  a  format  effectively 
creates  an  expansion  by  a  factor  2  due  to  the  necessity  for  tagging  each  variable 
Since  with  the  delta  encoding  and  the  predictor  a  compression  of  12  is  available, 

this  overhead  is  acceptable,  reducing  the  overall  compression  to  6. 

Initial  investigations  indicate  that  a  further  30  percent  compression  may 
be  possible  using  entropy  encoding  techniques.  The  penalty  is  an  increase  in 
processing  and  memory  requirements  (for  the  code  book)  and  increased  format 
complexity  due  to  the  variable  length  values.  It  is  recommended  that  these 
encoding  techniques  and  the  possible  compression  to  be  obtained  due  to  the 
i nterrel at ionsh i p  between  parameters  be  investigated  using  flight  data  to 
determine  the  actual  degree  of  compression  achievable.  To  define  the  most 
likely  compression  ratio  it  has  been  assumed  that  the  figures  quoted  above  can 
be  obtained.  For  configuration  II,  however,  which  is  a  system  requiring  no 
development  of  technology,  the  use  of  entropy  encoding  has  not  been  assumed. 

This  configuration  also  requires  only  minimum  data  retention,  which  is  10  to 
15  min  plus  preflight  and  takeoff  data.  For  conf igurat ion  I,  however,  it  will 
be  advantageous  to  record  30  min  of  data.  The  storage  capacities  are  therefore 
as  given  below. 


Conf igura- 
t  ion 

Raw  data, 
bits/s 

Data  retention, 
min 

Total  data, 
bits 

Compression 

ratio 

Compressed  data, 
bits 

1 

2  K 

30 

3.6  M 

8  to  9 

420  K 

1  1 

1  K 

15 

900  K 

6 

150  K 

If  audio  is  recorded  digitally,  the  data  storage  required  is  2.4  Mbit 
assuming  10  min  duration,  the  minimum  requirement,  and  a  si'ence  editing  ratio 
of  2,  which  should  be  obtainable.  For  analog  recording  the  minimum  duration 
of  10  min  is  required. 

Standard i zat ion 

If  standard i zation  is  considered  for  a  large  range  of  aircraft  including 
bombers  and  transports,  it  is  a  requirement  to  record  voice  and  data  for  longer 
durations  with  an  increased  number  of  parameters.  For  multicrewed  aircraft  at 
least  two  channels  of  voice  data  would  be  required.  These  requirements  are 
summarized  below  (information  is  given  for  digital  recording  of  audio). 
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Raw  data. 

Data  retention, 

Total  data. 

Compress  ion 

Compressed  data. 

bits  /s 

min 

bits 

ratio 

bits 

Data 

2.8  K 

90 

15  M 

8  to  9 

1.8  M 

S i 1 ence 
editing 

Aud  io 

2  channels 

30 

30  M 

2 

15  M 

Conf i qurat ion  III 

Recording  of  maintenance  data,  assuming  a  high  level  of  processing  onboard 
the  aircraft,  requires  approximately  2  Mbit  of  data  per  flight  for  a  short- 
duration  fighter-type  aircraft.  This  figure  is  based  upon  experience  of  the 
maintenance  system  on  the  U.S.  Navy  Hornet. 

This  figure  might  increase  to  6  Mbit  for  a  longer  duration  aircraft  and  to 
perhaps  16  Mbit  for  bomber  and  transport  aircraft.  A  lower  level  of  onboard 
processing  will  also  increase  capacity  requirements. 

Range  of  Data  Capacities 

The  following  is  a  summary  of  the  data  capacities  developed  above. 


Configuration  1 

Data 

420  Kbit 

Aud  io 

2.4  Mbit 

Conf iguration  1 1 

Data 

150  Kbit 

Audio 

2.4  Mbit 

Multi  eng ined 

Data 

1.8  Mbit 

long  duration  aircraft 

Aud  io 

15  Mbit 

Maintenance  data  (addi- 

Low  capacity 

2  Mbit 

tional  to  crash  data) 

Medium  capacity 

6  Mbi  t 

High  capacity 

16  Mbit 

These  capacities  can  be  provided  as  individual  memory  modules  for  crash 
data,  audio,  and  mainfenance,  but  would  be  better  provided  by  storing  a  combina¬ 
tion  of  some  or  al I  types  of  data  in  one  memory  module.  This  gives  a  range  of 
capacities  to  be  considered  as  follows. 

160  Kbit  (150  Kbit)  Configuration  II  crash  data  only 

1/2  Mbit  (420  Kbit)  Configuration  I  crash  data  only 


AlRESEARCH  MANUFACTURING  COMPANY 


81-17693 

Page  5-3 


3  Mbit 


Configuration  I  crash  data  and  audio 
Medium  capacity  maintenance 
High  capacity  maintenance 


6  Mbit 
16  Mbit 

Other  specific  capacities  are  close  enough  to  one  of  those  listed  above  to  make 
separate  consideration  unnecessary. 

SOLID-STATE  MEMORY 

The  memory  technology  survey  shows  that  the  prime  contenders  for  use  in 
a  solid-state  memory  are  the  BORAM  devices  produced  by  Westinghouse  and  the 
Intel  Corporation  E^PROM  devices  produced  by  the  HMOS-E  process. 

Figure  5-1  shows  the  projected  cost  of  the  Intel  devices  packaged  in  chip 
carriers  for  both  the  16-Kbit  device  (M  2816)  and  the  64-Kbit  device  scheduled 
to  be  available-  in  1983. 

These  chip  carriers  can  be  packaged  four  in  a  28-pin  dual-in-line  package. 
The  projected  costs  of  this  form  of  package,  together  with  the  cost  per  bit 
is  shown  in  Figure  5-2. 


Figure  5-1.  Projected  Cost  of  Intel  E^PROM  Devices 
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Figure  5-2.  Projected  Cost  of  Intel  E^PROM  Devices  in  High-Capacity  Packages 


The  Westinghouse  (1/2  Mbit)  module  is  projected  to  reduce  to  a  cost  of 
1  cent  per  bit  when  total  sales  reach  100,000  modules.  Thus,  the  Intel  devices 
show  greater  promise  of  low  cost.  This  technology  also  has  the  advantage  that 
it  is  very  likely  to  be  second  sourced,  whereas  the  Westinghouse  units  are  not 
( see  Section  4 ) . 

DATA  ACQUISITION  AND  PROCESSING 

Ana  I oq-to-D i q i ta I  Conversion 

The  system  requirements  for  the  anal og-to-d iq i ta I  conversion  are  as  follows: 

•  Maximum  resolution  11  bits 

•  Worst-case  accuracy  0.1  percent 

•  Conversion  speed  1  ms  per  conversion 

Although  on  the  subject  aircraft  all  the  high  accuracy  parameters  are 
available  on  the  1553  bus,  in  order  to  provide  for  other  aircraft  where  they 
may  not  be  available  on  the  bus  so  that  a  standardized  equipment  may  be  designed, 
0.1  percent  accuracy  should  then  be  the  design  aim  for  the  converter. 
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These  requirements  are  best  obtained  using  a  12-bit  successive  approxima¬ 
tion  anal og-to-d igi tal  converter. 

PROCESSOR 

For  configuration  I  where  fairly  complex  compression  algorithms  will  be 
used  (entropy  encoding),  a  16-bit  processor  is  required  if  they  are  proven  to 
give  the  predicted  compression  ratios.  These  devices  are  becoming  much  more 
cost  effective  as  their  prices  reduce  with  the  manuf acturers  learning  curve  and 
sales  increase.  The  exact  processor  type  will  be  chosen  later,  in  a  develop¬ 
ment  program. 

In  a  configuration  II  system  the  compression  used  will  be  more  simple,  and 
can  be  achieved  with  a  lower  cost  fast  8-bit  processor.  The  choice  has  the 
additional  advantage  that  the  higher  risk  associated  with  16-bit  devices,  which 
currently  either  have  hardware  or  software  bugs,  or  are  difficult  to  obtain  to 
a  military  specification,  is  eliminated. 

The  longer  timescales  associated  with  a  configuration  I  system  will  reduce 
these  risks  to  an  insignificant  level. 

1553  BUS  INTERFACE 

The  interface  chip  set,  designed  by  Smiths  Industries  in  the  United  Kingdom 
and  discussed  in  Section  4,  will  not  operate  correctly  on  a  1553A  bus  due  to 
differences  in  timings,  status  bit,  and  mode  code  assignments.  Therefore,  a 
design  of  an  interface  based  on  the  Harris  LSI  device  has  been  chosen. 
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-SECTION  6 


CANO  I  GATE  SYSTEM  DEVELOPMENT 


CONFIGURATION  I 

Configuration  I  calls  for  the  maximum  number  of  parameters  to  be  recorded 
for  the  maximum  useful  time.  This  is  the  optimum  solution  for  a  crash  surviv- 
able  flight  data  recorder  (CSFDR)  that  would  be  used  in  a  post-accident  analysis. 

The  block  diagram  of  this  system  is  shown  in  Figure  6-1,  and  it  breaks  down 
into  five  sections  as  follows: 

(a)  Signal  conditioning  and  digitization 

(b)  1553  data  bus  remote  terminal  unit 

(c)  M icroprocessor  and  associated  support 

(d)  Crash  survivable  memory  module 

(e)  Power  supply  unit 

The  system  will  be  comprised  of  two  separate  units  comprising  the  data 
acquisition  and  processing  unit  (DAPU)  and  the  crash  survivable  memory  module 
(CSIW).  The  reason  for  two  separate  units  is  that  the  ideal  position  within 
an  aircraft  for  a  CSMM  is  as  far  aft  as  possible.  The  data  transfer  and  control 
of  the  CSNW  from  the  DAPU  will  be  carried  out  using  a  dedicated  data  link. 

The  DAPU  should  be  as  close  to  the  electronic  equipment  bay  as  possible,  as 
this  is  where  most  signals  are  available. 

The  CSMM  will  probably  be  in  an  inaccessible  position.  This  necessitates 
that  the  data  link  between  the  two  units  is  a  bidirectional  data  link.  This 
would  allow  for  any  built-in  test  functions  to  be  carried  out  so  that  fault 
isolation  between  the  data  acquisition  and  processing  unit  and  the  crash  sur¬ 
vivable  memory  module  is  accomplished. 

The  DAPU  interfaces  with  existing  aircraft  systems  that  supply  the  data 
inputs.  There  will  be  two  types  of  data  formats — the  analog  signals  and  the 
serial  digital  data  bus  (1553). 

The  interfacing  to  these  systems  will  be  designed  such  that  the  CSFDR 
will  not  degrade  any  aircraft  functions.  The  serial  digital  data  interface 
will  conform  to  the  Mll-STD-1553  that  is  fitted  to  each  candidate  aircraft. 

There  are  various  derivatives  of  the  M IL-STD- 1 553,  and  the  same  aircraft  may 
have  different  standards  depending  on  the  aircraft  build  state. 

Analog  interfacing  can  be  a  problem  if  certain  areas  are  neglected.  These 
areas  are  as  follows: 
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(a)  EMI  as  per  MIL-STD-461A 

(b)  Current  injection  (back  current) 

(c)  Impedance  matching 


In  this  application,  particular  reference  will  be  made  to  MIL-E-5400, 
class  A,  general  specification  for  airborne  electronic  equipment. 

The  three  candidate  aircraft  have  been  studied,  and  the  maximum  number  of 
any  one  type  of  analog  parameter  is  shown  in  Table  6-1.  A  large  amount  of 
emphasis  has  been  placed  on  making  the  system  flexible  and  totally  interchange¬ 
able  between  the  candidate  aircraft  with  a  minimum  amount  of  change  to  the 
hardware.  This  may  increase  the  unit  price  by  a  small  amount  but  the  cost  of 
having  a  dedicated  system  for  each  aircraft  would  be  much  higher,  due  to  the 
spares  and  logistic  support. 

The  differences  between  the  three  candidate  aircraft  and  their  various 
build  standards  are  small  enough  to  be  included  in  one  firmware  module.  The 
firmware  module  will  be  in  the  form  of  a  look-up  table.  For  each  aircraft 
there  would  be  a  dedicated  program  block,  each  block  labeled  according  to  the 
aircraft  in  which  the  system  is  installed.  The  label  would  be  identified  by 
a  code  generated  by  hardwiring  on  the  system  connectors. 

It  is  essential  that  the  parameter  data  is  correctly  recognized  and  placed 
in  the  allocated  address  within  the  working  store  of  the  microprocessor  (see 
Figure  6-2).  The  look-up  table  will  be  programmed  into  a  programmable  read 
only  memory  (PROM)  and  will  contain  the  information  relating  to  each  parameter. 
This  information  will  instruct  the  microprocessor  which  input  channel  a  particu¬ 
lar  parameter  is  on,  its  sampling  rate,  accuracy,  and  allocated  address  in  the 
working  store.  Once  the  data  is  correctly  placed  in  the  working  store  it  is 
available  for  manipulations  by  the  microprocessor . 

TABLE  6-1 

PARAMETER  REQUIREMENTS  FOR  CONFIGURATION  I 


Parameter  Type 

Number 

Synchro 

9 

LVOT  (ac  ratio) 

5 

Dc 

10 

Tachometer 

4 

Dc  ratiometeric 

1 

Discrete 

32 

1553 

10 
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PARAMETER 

INPUTS 


ANALOG 

MULTIPLEXING 

AND 

DIGITIZATION 


MICROPROCESSOR 

DATA 

TRANSFER 


LOOK  UP  TABLE 

AIR¬ 

CRAFT 

CHARACTERIZATION  PROM 

CHANNEL 

TYPE 

SEQ 

RATE 

F-1 5 

F-16 

A-1 0 

OTHERS 

WORKING  RAM 


AIRSPEEO  X  2 


ALTITUDE  X  S 


N.L.F.  X  16 


AIRCRAFT 
<3  TYPE 
CODE 


Figure  6-2.  Control  of  Signal  Input  to  Fixed  Frame  Store  Format 


The  analog  signals  having  various  characteristics  and  the  signal  condi¬ 
tioning  circuits  are  designed  to  produce  a  similar  dc  voltage  range.  This 
voltage  is  multiplexed  using  a  CMOS  analog  multiplexer  to  the  ana  I og-to-d i g i ta I 
converter.  It  is  then  converted  to  a  12- bit  word  in  a  two's  complement  notation. 
The  discrete  and  digital  parameters  are  multiplexed  onto  the  microprocessor  data 
bus  using  a  tri- state  buffer. 

The  serial  data  off  the  1553  data  bus  is  accessed  and  transferred  onto 
the  microprocessor  data  bus  when  required  by  the  microprocessor  program.  As 
the  microprocessor  has  a  number  of  tasks  to  accomplish,  the  data  compression 
algorithms  being  the  most  complex,  a  16-bit  microprocessor  has  been  selected. 

This  will  allow  some  spare  processing  capability. 

Once  the  data  has  been  compressed  and  formatted  into  a  recoverable  form, 
it  is  transmitted  to  the  CSMM  via  a  serial  interface  port. 

Built-in  test  is  designed  so  that  any  failure  within  the  system  is  indicated 
in  the  failed  unit,  data  acquisition  and  processing  unit,  or  memory  module.  It 
is  assumed  that  the  power  for  the  CSFDR  will  be  derived  from  the  28-vdc  essential 
power  bus.  This  would  conform  to  Ml L-STD-704D.  The  regulated  supplies  for  the 
electronics  within  the  CSFDR  will  be  generated  using  a  switching  power  supply. 
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Software  Structure 


The  proposed  software  structure  a'nd  timing  relationships  are  shown  in 
Figure  6-3.  Interrupts  can  originate  from  three  basic  sources: 

(a)  The  sampling  frequency  clock  (16  per  sec) 

(b)  The  1553  bus  (to  indicate  data  is  available) 

(c)  The  power  up/power  fail  signal 

Following  an  interrupt,  the  executive  determines  which  real-time  task  is  to 
be  activated.  On  completion  of  the  task,  and  if  no  other  real-time  tasks  are 
pending,  the  executive  activates  the  background  (nonreal-time)  scheduler,  which 
in  turn  determines  which  background  task  should  be  continued  or  activated. 

The  real-time  tasks  will  include  control  and  input  of  the  signals  from 
the  data  acquisition  circuits  and  1553  data  bus.  The  background  tasks  will 
perform  the  compression,  data  formatting,  store  control ,  and  BIT.  Although 
these  tasks  are  not  real-time  critical  in  the  same  sense  as  the  foreground 
tasks,  they  will  need  to  be  executed  within  a  maximum  time  period  in  order 
to  avoid  data  staleness. 

Software  Tasks 

The  main  tasks  to  be  performed  by  the  software  can  be  summarized  as 
fol lows: 

(a)  Control  of  DAU  hardware 

(1)  A/D  converter  and  multiplexer 

(2)  1553  remote  terminal 

(b)  Data  processing 

(1)  Conditioning  and  conversion  of  input  signals 

(2)  Compression  algorithms 

(c)  Data  storage 

(1)  Store  formatting 

(2)  Store  control 

(d)  Executive  functions 

(1)  Power  fail/restart  and  initialization 

(2)  Timing  and  task  scheduling 

(3)  Auxiliary  I/O  (e.g.,  memory  dump  initialization) 
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Figure  6-3.  Proposed  Software  and  Timing  Relationships 
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(e)  BIT 


(1)  Working  storage  and  program  memory  checks 

(2)  Parameter  range  checks 

(3)  A/D  and  multiplexer  checks 

(4)  Reference  voltage  checks 

(5)  CPU  and  I/O  checks 

(6)  Watchdog  and  timer  checks 

Apart  from  the  BIT  that  checks  the  memory  and  data  acquisition  circuitry, 
the  additional  sensors  added  for  the  CSFDR  will  be  checked  by  verifying  that 
correlated  parameters  follow  each  other.  This  would  allow  sensor  malfunctions 
to  be  indicated  although  the  onboard  processing  would  not  be  powerful  enough 
to  detect  small  amounts  of  drift  or  loss  of  memory. 

CONFIGURATION  II 

Configuration  II  is  shown  in  Figure  6-4.  The  design  restraints  placed  on 
this  configuration  by  the  Request  for  Quotation  are  "It  shall  utilize  existing 
technology  for  data  processing  and  recording  capability  which  covers  only  the 
highest  priority  flight  data  requirements"  and  it  "shall  utilize  technology 
which  does  not  require  additional  development  or  testing  before  incorporation 
in  the  system." 

The  number  of  parameters  that  will  be  recorded  in  this  configuration  are 
shown  in  Table  6-2.  The  signal  conditioning  circuits  that  are  used  will  be 
similar  to  the  ones  in  configuration  I. 

The  tasks  that  will  be  carried  out  by  the  microprocessor  will  be  simplified 
due  to  the  simpler  data  compression  algorithms  and  the  straightforward  data  format 
used.  This  can  be  carried  out  by  an  8- bit  mi croprocessor . 

The  BIT  requirements  are  similar  to  those  in  configuration  I. 

CONFIGURATION  III 

Configuration  III  is  shown  in  Figure  6-5.  The  requirement  from  the  RFQ 
for  this  configuration  calls  for  a  system  similar  to  configuration  I,  but 
showing  the  impact  of  the  addition  of  a  maintenance  capability.  The  storage 
module  for  maintenance  does  not  need  crash  protection. 

The  design  of  this  configuration  is  similar  to  configuration  I.  To 
provide  for  maintenance  data,  the  number  of  parameters  and  their  appropriate 
signal  conversion  circuits  have  been  increased  (see  Maintenance  Recording, 

Section  3) . 
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gure  6-4.  Configuration 


TABLE  6-2 


PARAMETER  REQUIREMENTS  FOR  CONFIGURATION  II 


Parameter  Type 

Number 

Synchro 

2 

LVDT  (ac  ratio) 

3 

Dc 

3 

Tachometer 

4 

Dc  ratiometric 

1 

D  i  screte 

16 

1553  (dual  bus) 

1 

The  maintenance  data  requires  a  different  type  of  data  compression 
algorithm,  so  extra  processor  memory  will  be  required.  This  memory  will 
allow  for  the  extra  software  and  scratchpad  requirements.  Depending  on 
the  type  of  maintenance  system  implemented,  a  buffer  store  may  be  required. 

This  will  hold  the  data  until  it  is  instructed  to  dump  onto  the  storage 
module.  The  storage  module  would  need  to  be  mounted  in  an  accessible  location 
in  the  aircraft,  so  that  the  data  can  be  easily  retrieved  for  maintenance 
purposes. 

CSFDR  Ground  Replay  Equipment 

The  ground  replay  equipment  for  the  CSFDR  will  consist  of  three  separate 
units  to  replay  and  assess  the  data  collected  during  a  flight.  These  units  are 
the  crash  store  milking  equipment,  the  flight  line  analysis  equipment,  and  the 
crash  data  replay  system,  and  are  described  as  fo1 lows. 

Crash  Store  Milking  Equipment 

The  crash  store  milkinq  equipment  will  consist  of  a  small  portable  unit 
that  is  carried  to  the  aircraft  bv  ground  personnel.  Replay  is  controlled  via 
a  front  panel  keypad,  and  this  information  is  fed  to  a  microprocessor  in  the 
replay  unit  that  controls  all  operations.  Data  is  read  from  the  memory  module 
and  transmitted  over  a  serial  data  link  to  the  replay  unit.  It  is  then  written 
to  a  cartridge  recorder  together  with  date,  time,  and  aircraft  number  identifi¬ 
cation  information  entered  via  the  keypad.  This  allows  each  cartridge  to  con¬ 
tain  data  from  more  than  one  fliqht,  and  it  is  envisaged  that  one  cartridge 
will  have  enough  capacity  (approximately  10  MBit)  for  3  to  4  flights  (see 
F igure  6-6) . 
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Figure  6-5.  Configuration  111  System  Block  Di aqran 


REPLAY  SYSTEM 

PORTABLE  MILKING 
SYSTEM 


A  13689 

Figure  6-6.  CSFDR  Replay  Equipment 

The  m i croprocessor  will  also  perform  a  self- test  at  power  on,  and  any 
status  or  error  information  will  be  indicated  via  front  panel  LED  or  LCD 
displays.  It  the  chosen  crash  storage  media  is  solid  state,  then  an  assess¬ 
ment  of  the  data  retention  will  be  made  every  time  the  crash  store  is  milked. 
This  will  be  done  by  utilizing  a  soft  erase  or  threshold  voltage  measurement 
technique,  and  if  the  test  falls  outside  preset  limits,  then  a  fail  condition 
will  be  indicated  on  the  replay  equipment  control  panel.  The  replay  unit  will 
be  housed  in  a  rugged,  light,  and  sealed  case,  and  will  be  constructed  in 
accordance  with  MIl-T-21200. 

Flight  Line  Analysis  Equipment 

This  equipment  will  consist  of  an  interface  between  the  portable  milking 
equipment  and  a  PDP11/34  or  similar  minicomputer.  The  data  analysis  software 
will  be  stored  on  disc  and  act  on  data  fed  to  it  via  a  serial  data  link  to  the 
milking  equipment.  Operator  control  of  the  system  will  be  via  a  video  display 
unit  (VDU),  and  results  will  be  printed  on  a  line  printer  or  displayed  on  the 
VDU  (see  Figure  6-6). 

Once  the  milking  equipment  has  been  connected  to  the  data  analysis  computer, 
a  keyboard  command  will  initiate  data  extraction.  The  data  is  then  written  to 
magnetic  disc  or  tape  drive  and  stored  together  with  the  header  identifying  the 
date,  time,  and  aircraft  from  which  the  data  was  collected.  After  all  of  the 
data  has  been  read  from  the  data  cartridge  and  written  onto  tape  or  disc,  the 
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data  analysis  software  will  give  the  operator  a  choice  of  data  processing 
procedures.  The  following  options  will  be  available: 


Output  Device — The  operator  will  be  given  a  choice  as  to  where  the 
results  of  the  analysis  computations  are  to  be  output.  Three  options 
will  be  available:  VQU ,  line  printer,  or  stored  on  disc  for  later 
printing  or  access. 

Parameters  of  Interest — The  operator  will  be  given  a  choice  as  to 
whether  all  the  parameters  or  only  a  subset  of  the  parameters  are 
analyzed.  The  audio  channel  will  be  constantly  monitored  and  avail¬ 
able  via  a  self-contained  loudspeaker  or  external  headphones. 

Output  Format — The  operator  will  be  given  a  choice  as  to  the  format 
of  the  output  data.  Depending  on  the  parameters  and  the  sort  of 
information  that  is  required  from  the  data,  the  operator  may  want 
to  select  either  graphical  or  tabulated  results.  The  timescale  of 
the  analysis  window  will  also  be  variable  from  a  few  minutes  of  the 
flight  to  the  last  30  min. 

The  analysis  system  will  be  housed  in  a  free-standing  case  and  will  inter¬ 
face  to  the  minicomputer  using  a  parallel  interface  card. 

Crash  Data  Replay  System 

The  crash  data  replay  system  will  be  capable  of  replaying  and  analyzing 
data  from  the  CSFDR  after  a  crash  or  incident.  To  perform  this  task,  the  CSFDR 
is  removed  from  the  aircraft  and  plugged  into  the  data  analysis  computer  system 
described  in  the  preceeding  section.  Data  extraction  is  initiated  with  a  key¬ 
board  command,  and  data  is  then  read  from  the  CSFDR  and  written  to  an  IBM  format, 
9-track,  1 600-BP  I ,  0.5- in.  tape  system  (see  F!gure  6-7). 

For  quick- look  assessment,  this  data  can  then  be  used  in  the  same  way  as 
the  data  from  the  portable  replay  machine.  Alternatively,  the  IBM-format  tape 
can  be  taken  to  one  of  the  IBM  370  computers  that  are  used  by  the  Air  Force 
for  crash  investigation  and  a  full  analysis  performed. 

Maintenance  Support  Equipment 

The  expected  high  reliability  of  the  CSFDR  airborne  components  leads  to  a 
maintenance  philosophy  in  which  all  actual  unit  repair  and  retest  is  accomplished 
at  intermediate  or  depot-level  maintenance  facilities.  Only  spare  units  are 
stored  at  organizational  level. 

At  intermediate  and  depot  level,  maintenance  is  supported  by  spare  modules 
and  special  test  equipment.  Modules  are  interchangeable  without  reca I i bration 
and  do  not  require  special  tools  for  replacement.  Established  module  costs  are 
included  in  the  life-cycle  cost  analysis. 

j 

The  special  test  equipment  that  is  projected  for  CSFDR  support  is  to  allow 
full  exercising  of  all  unit  inputs  and  display  of  all  unit  outputs.  No  inter¬ 
connection  to  standardized  ATE  is  assumed.  All  analog  input  channels  may  be 
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Figure  6-7.  Crash  Data  Replay  System 


adjusted  to  any  point  in  their  ranges.  The  MIL-STD-1553  data  bus  may  be  exer¬ 
cised  through  a  range  of  data  values  and  various  fault  modes.  In  addition, 
special  test  connections  on  both  units  will  permit  evaluation  of  required 
internal  test  points,  such  as  power  supply  voltages.  The  panel  will  be  suffi¬ 
cient  to  allow  a  complete  retest  of  a  repaired  unit  prior  to  return  to  service 
or  stock. 


1 
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SECTION  7 


COST  EFFECTIVENESS 


LIFE-CYCLE  COST 

Two  models  have  been  used  to  study  the  life-cycle  costs  (LCC)  of  the 
proposed  CSFDR  systems:  (1)  the  simple  model  detailed  below,  which  indicates 
the  parameters  and  sensitivities  involved,  and  (2)  the  LCC-2A  model,  a  more 
comprehensive  LCC  model  developed  by  the  USAF. 

Simple  Model 

The  total  life-cycle  cost  will  include  both  the  system  acquisition  costs 
and  the  support  costs  incurred  throughout  the  system  lifetime.  For  simplicity 
the  model  will  consider  the  data  acquisition  unit  (DAU)  and  the  memory  module 
(MM)  as  two  separate  spares,  which  have  to  be  returned  to  intermediate  level 
(IL)  for  repair.  The  further  breakdown  of  these  line  replaceable  units  (LRU's) 
into  shop  replaceable  units  (SRU's)  will  not  be  considered  in  the  simple  model, 
the  support  cost  being  calculated  for  one  IL  support  center.  Total  support 
cost  equals  initial  spares  cost  plus  follow-on  spares  cost,  repair  cost,  man¬ 
power  cost,  and  test  equipment  support  cost. 


Initial  Spares  Cost 


The  initial  spares  required  will  depend  on  the  total  aircraft  flying  hours, 
the  repair  time,  the  mean  time  between  failures  of  the  DAU  and  MM,  the  number 
of  condemned  units  (lost  on  aircraft  or  unserviceable)  and  the  initial  support 
per i od . 


Let: 


=  total  aircraft  flying  hours  per  base  per  month 

r-j-  =  repair  rate,  base  to  IL  and  return  to  base  in  months 

P|  =  initial  support  period  in  months 

fq  =  DAU  condemnation  rate  (per  month) 

F^  =  MM  condemnation  rate  (per  month) 

=  DAU  MTBF  (hours) 

m  =  MM  MTBF  (hours) 

M 


For  the  DAU,  the  number  of  initial  spares  will  be  given  by 


N 


ID 


Mq 


-L  + 


FD 
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and  for  the  MM  the  number  of  initial  spares  will  be  given  by 

N...  =  [nh  »  Rt  «  P|  +  FM  *  P n 
,M  L  Mm  J 

However,  in  order  to  ensure  that  no  spare  is  unrepaired  at  the  base  due  to  back¬ 
orders,  a  safety  stock  is  required.  Assuming  a  96  percent  safety  stock  level 
and  that  the  spares  demand  follows  a  Poisson  distribution,  the  total  cost  of 
the  initial  spares  is  given  by 

Initial  spares  cost  =  (N|q  +  ,/3n7q)  *  Cq  +  (N|m  +  v^^lM  )  *  CM 
where  Cq  =  cost  of  DAU  in  dollars 
Cm  =  cost  of  MM  in  dollars 

Graph  1  illustrates  the  initial  spares  cost  for  single  LRU's  costing 
$8000  (DAU)  and  $4000  (MM)  against  their  mean  time  between  failure  (MTBF) 
for  one  IL  support  center. 

Follow-on  Spares 

For  the  follow-on  period,  no  safety  stock  is  required  in  addition  to  the 
initial  spares,  the  only  additions  to  the  repair  cycle  being  the  spares  to 
replace  the  condemned  stock  (the  effect  of  this  stock  being  reduced  throughout 
the  life-cycle  due  to  the  effectiveness  of  the  CSFDR  in  aircraft  saves  will  not 
be  considered) . 


Let  Pp  =  follow-on  support  period  (months) 

then  Fol  low-on  spares  cost  =  Npj  *  Pp  *  JFq  *  Cq  +  Fm  *  CmJ 

Repair  Cost 

If  it  is  assumed  that  the  repair  cost  averages  20  percent  of  the  new 


cost 


Repair  cost  =  0.2  *  Npj  *  (P|  +  Pp)  * 


Cq  Cm' 

[Mb  +  MmJ 


Graph  2  shows  the  repair  costs  of  the  DAU  and  MM  for  the  total  support 
period  of  20  yr  against  MTBF,  for  costs  of  $8000  (DAU)  and  $4000  (NM). 

Manpower  Cost 

If  a  manhour  rate  in  dollars  of  Cp|  per  flight  hour  is  assumed 
Manpower  cost  =  Npj  *  (P|  +  Pp)  *  Cp| 
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The  cost  of  the  test  equipment  support  is  assumed  to  be  1  percent  of  the 
test  equipment  cost,  Cj  Per  year 


Total  equipment  support  cost  =  0.01  *  (P| 


♦V 


*  °T 


Total  Cost  of  Configuration  I 


As  well  as  simplifying  the  repair  cycle  structure  other  factors  such  as 
development  costs,  expense  spares,  training  costs,  shipping  costs,  data  manage¬ 
ment  costs,  and  warranty  agreements  have  been  ignored  for  this  simplified  model 
If  we  assume  the  following  parameter  values: 

Number  of  aircraft  < A— 10,  F— 15,  F— 16)  =  3150 

Number  of  bases  =  68 


Number  of  intermediate  levels  (IL) 

Repair  turnaround  time  ( R^_ ) 

Flying  time  per  month 
Condemnation  rates 
Initial  support  period  (P() 

Fol low-on  per i od 
DAU  MTBF  (Mq) 

MM  MTBF  (Mm> 

DAU  cost  <CD> 

MM  cost  (C|y|) 

Replay  unit  (1  at  each  IL)  cost 
Milking  unit  (1  at  each  base)  cost 
DAU  and  MM  test  set 

Manpower  rate  per  flight  hour  (at  each  IL) 


10 

2  months 

25  hours 
0 

12  montns 

228  months 
12,000  hours 
8000  hours 
$8000 
$4000 

$17,000 

$12,000 

$50,000 

$0.25 


Installation  cost  per  aircraft 


$8000 
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For  a  fleet-wide  fit  the  following  values  are  obtained  for  the  acquisition 
and  support  costs: 


1  tern 

Cost, 

$M 

Prime  equipment  cost 

37.8 

Test  equipment  and  replay  cost 

1 .5 

1 nsta 1 1  at i on  cost 

24.0 

Initial  spares  cost 

3.2 

Follow-on  spares  cost 

0 

Repair  cost 

4.4 

Manpower  cost 

4.7 

Test  equipment  and  replay  support  cost 

3.0 

Total  20  yr  cost  of  ownership 

78.6 

Although  the  total  life-cycle  cost  is  determined  mainly  by  the  prime  equip¬ 
ment  and  installation  costs,  the  LOC  is  also  sensitive  to  the  MTBF's  of  the  DAU 
and  MM.  For  example,  if  the  MTBF's  are  half  those  estimated  for  the  two  units 
the  LOG  is  increased  to  $82.7  M.  If  they  are  halved  again  the  LCC  is  further 
increased  to  $99.7  M  (see  Figure  7-1).  It  would  therefore  appear  that  if  the 
proposed  MTBF's  can  be  validated,  effort  should  be  directed  towards  decreasing 
the  prime  equipment  and  installation  costs  (see  Figure  7-2).  The  development 
costs  have  not  been  included  in  the  model,  and  it  assumed  they  are  a  small 
proportion  of  the  total  LCC. 

Other  Configuration  Costs 

The  costs  for  configurations  II  and  III  will  not  be  separately  estimated. 
However,  it  is  clear  from  the  Total  Cost  of  Configuration  I  (Section  7)  that 
the  cost  will  be  dictated  by  the  equipment  and  installation  costs  providing 
the  equipment  MTBF  is  above  3000  hr. 

COST  BENEFIT 

Technical  report  NY  1245  summarizes  the  USAF  Norton  incident  reports  for  the 
period  1976  to  1980  (4-1/2  yr)  on  fighter,  trainer,  and  attack  aircraft.  From 
these  results  the  following  table  may  be  compiled  indicating  the  average  number 
of  damaged  aircraft,  lost  aircraft,  and  loss  of  life  per  year. 
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NO.  OF  SPARES 


MTBF,  HR 


A-13843 


Figure  7-1.  MTBF  Total  Spares  Holding  at  10  Intermediate  Levels 


MTBF,  HR 

A-12SM 


Figure  7-2.  MTBF  Repair  Cost  for  the  Two  LRU  Costs 
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Aircraft 

Lost 

Aircraft 

Damaged 

Personnel 

Lost 

Aircraft 
Lost  at 
Sea 

Aircraft 

Lost 

Over  Land 

Total  incidents 

70 

1 12 

40 

4 

66 

Incidents  with 
inconclusive  reports 

37 

16 

21 

3 

34 

Total  aircraft  from  which  sample  was  taken  is  approximately  5000 
For  the  analysis  the  following  average  data  were  assumed: 


New  aircraft  cost 
Average  damage  cost 
Sea  recovery  cost 
Land  recovery  cost 
Loss  of  life  cost 


$15  M 

20  percent  new  aircraft  cost 
$1/2  M 
$100,000 
$1  M 


It  is  difficult  to  quantify  the  effectiveness  of  the  CSFDR  in  changing 
incidents  associated  with  inconclusive  findings  into  conclusive  reports  that 
lead  to  positive  actions  resulting  in  aircraft  saves.  However,  it  is  consid¬ 
ered  reasonable  that  the  CSFDR  will  lead  to  a  minimum  of  1  in  10  aircraft  saves 
averaged  over  the  whole  life  cycle  (i.e.,  10  percent  composite  effectiveness). 

From  the  analysis  of  818  U.S.  Air  Force  accidents,  53  percent  were  incon¬ 
clusive  as  to  the  cause  where  the  aircraft  was  a  total  loss  (see  Appendix  M). 

In  addition,  a  20-yr  life-cycle  leading  to  a  19-yr  benefit-cycle  is  assumed 
Using  these  figures  the  total  cost  of  aircraft  incidents  per  year  is: 

Current  cost  =  Damage  cost  +  overland  total  loss  costs  +  at  sea 
total  loss  costs  +  personnel  loss  costs 

Current  cost,  $M  =  damage  (112  x  0.2  x  15)  +  land  loss  (66  x  15.1) 

+  sea  loss  (4  x  15.5)  +  personnel  loss  (40  x  1) 

giving  a  total  cost  per  year  of  $1435  million  dollars.  Since  the  expected  num¬ 
bers  of  A-10,  F-15,  and  F— 16  aircraft  is  less  than  the  statistical  sample  size, 
this  figure  will  be  factored  by  0.6.  If  100  percent  effectiveness  in  saving 
losses  with  inconclusive  findings  is  assumed,  the  formula  above  gives 

100  percent  =  damage  (16  x  0.2  x  15)  +  land  loss  (34  x  15.1)  + 

effectiveness  sea  loss  (3  x  15.5)  +  personnel  loss  (21  x  1) 
cost  saving 
per  year,  $M 


AIRESCARCH  MANUFACTURING  COM  A  ANT 


81-17693 
Page  7-6 


giving  a  total  cost  saving  per  year  of  $628  million.  Again  this  will  be  factored 
by  0.6  in  order  to  obtain  the  projected  figure  for  100  percent  effectiveness  of 
the  CSFDR  in  airplane  saves. 


Table  7-1  shows  the  total  cost  savings  for  the  minimum  (10  percent), 
expected  (20  percent),  and  maximum  (50  percent)  estimated  composite  effective¬ 
ness  of  the  CSFDR  system  in  reducing  aircraft  incidents. 


TABLE  7-1 
COST  SAVINGS 


Compos i te 
Effectiveness, 
percent 

Average  Savings 
per  year,  $M 

Total  Savings 

Over  Li fe  Cycle, 

$M 

10 

38 

722 

20 

76 

1444 

30 

114 

2166 

40 

152 

2888 

50 

190 

3610 

COST  BENEFIT  CONCLUSION 

For  a  composite  effectiveness  of  10  percent  (the  absolute  expected  minimum) 
and  an  LCC  of  $78.6  million,  a  cost  benefit  is  achieved  after  about  2  years  of 
installation,  the  final  benefit  being  in  the  region  of  800  percent.  Since  the 
aircraft  loss  costs  and  the  CSFDR  effectiveness  are  conservative  figures,  it  is 
clear  there  is  considerable  benefit  to  be  gained  from  fitting  the  crash  recorder 
system. 

LIFE-CYCLE  COST  ANALYS I S— LCC-2A  MODEL 

The  object  of  this  study  is  to  estimate  the  total  cost  of  ownership  or 
life-cycle  cost  of  the  proposed  flight  recorder  system. 

The  preliminary  undiscounted  life-cycle  cost  estimate  using  the  LCC-2A 
computer  model  is  $65.9  million.  This  estimate  includes  the  cost  of  one  spare 
each  of  the  DAPU  and  the  memory  module  unit  at  each  base  (68  bases)  and  the 
cost  of  one  spare  of  each  SRU  at  each  of  the  intermediate  level  bases  (11 
intermediate  bases). 

The  prime  equipment  costs  used  in  the  LCC  analysis  assume  a  memory  module 
cost  of  $4000.  The  actual  memory  cost  will  depend  on  whether  it  is  decided  to 
include  audio  recording,  the  point  of  introduction,  and  the  memory  type  to  be 
utilized.  Figure  7-3  gives  an  indication  of  the  comparative  costs  for  each 
potential  memory  type  against  year  of  introduction. 
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Figure  7-3.  Approximate  Costing  Storage  Availability  Prediction 

Preliminary  sensitivity  analyses  using  the  LCC-2A  model  indicated  that 
doubling  the  system  operating  hours  per  month  increased  the  total  life-cycle 
cost  by  0.8  percent;  however,  doubling  the  cost  per  system  installation 
increased  the  total  life-cycle  cost  by  38  percent.  The  plots  of  those  para¬ 
meters  versus  total  life-cycle  cost  (undiscounted)  are  shown  in  Figures  7-4 
and  7-5. 

Model  Description 


The  life-cycle  cost  computer  model  used  in  the  determination  of  the  life- 
cycle  cost  of  the  flight  recorder  is  the  LCC-2A  model  used  at  Wright  Patterson. 
This  model  requires  as  input  standard  cost  factors,  logistic  factors,  hardware 
definition,  support  equipment,  and  contractor  data.  It  calculates  the  follow¬ 
ing  cost  categories: 

(a)  Acquisition  cost 

( 1 )  Initial  tra i n i ng 

(2)  Technical  data  acquisition 

(3)  Initial  item  management 

(4)  Initial  data  management 

(5)  Hardware 


r 
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(6)  Support  equipment 

(7)  Initial  spares 

(8)  I  nsta  Nation 

(9)  Warranty 

(b)  Operation  and  maintenance  cost 

(1)  Flight  line  maintenance 

(2)  Intermediate  level  maintenance 

(3)  Depot  maintenance 

(4)  Recurring  item  management 

(5)  Recurring  data  management 

(6)  Packaging  and  shipping 

(7)  Support  equipment  maintenance 

It  provides  eight  output  options,  which  are  as  follows: 

(a)  Input  data 

(b)  Support  equipment  requirements 

(c)  Spares  requirements  (detailed) 

(d)  Spares  requirements  (unit  totals) 

(e)  Manpower  requirements 

(f)  Total  cost  summary  (by  category) 

(g)  Total  cost  summary  (by  year) 

(h)  Sensitivity  analysis  results 

The  LCC-2A  model  is  used  for  tradeoff  and  cost  benefit  analyses  of  avi¬ 
onics  systems  and  is  now  being  used  by  most  aerospace  companies  to  respond  to 
request  f or  proposals. 


A  glossary  of  symbols  used  in  this  model  is  shown  in  Exhibit  7A. 


Computer  Runs 


The  outputs  of  the  computer  runs  are  given  in  Exhibits  7B,  7C,  and  7D. 
Exhibit  7B  is  the  output  for  the  basic  run.  Exhibit  7C  is  the  output  of  the 
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sensitivity  analysis  done  on  the  cost  per  system  installation.  Exhibit  7D  is 
the  output  of  the  sensitivity  analysis  done  on  the  system  operating  hours  per 
month . 


In  these  outputs,  the  computed  spares  at  the  bases  for  the  LRU's  and  the 
SRU's  are  zero  because  of  high  mean  time  between  failures  (MTBF)  and  a  fast 
turnaround  cycle.  In  the  calculation  of  the  total  life-cycle  cost  estimate, 
the  cost  of  the  68  bases  and  the  cost  of  one  spare  of  each  of  the  SRU's  at  each 
of  the  11  intermediate  levels  were  included.  This  cost,  which  was  determined 
separately,  is  $948,000. 

APPENDIXES 

Appendixes  A  through  M  are  included  with  this  report.  Although  the  appen¬ 
dixes  are  not  all  individually  referenced  within  the  body  of  the  report,  the 
information  contained  within  each  of  the  appendixes  was  taken  into  account 
during  the  formulation  of  the  study's  conclusions  and  recommendations. 
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EXHIBIT  7 A 


GLOSSARY  OF  SYMBOLS 

ACS  -  Acquisition  cost  In  dollars  per  system 

A0e  -  LRU  availability  objective  (the  steady-state  probability  that 

an  LRU  is  not  In  an  unreparable  state  at  base  level  due  to  a 
backorder  on  the  SRU  spare  supply) 

A0S  -  System  availability  objective  (the  steady-state  probability 
that  an  aircraft  Is  not  in  NORS  (Not  Operationally  Ready  due 
to  Supply)  status  due  to  an  LRU  backorder 

AOl  -  Spares  objective  (system) 

A02  -  Spares  objective  (shop) 

BDSA  -  Average  shipping  time  in  hours  from  base  to  depot 

BDSC  -  Average  shipping  time  in  hours  to  depot  from  CONUS  bases 

BDSO  -  Average  shipping  time  In  hours  to  depot  from  overseas  bases 

BTC  -  Base  training  cost  in  dollars 

Ck  -  Total  cost  in  dollars  incurred  by  the  Government  In  year  k 

Cjk  -  Value  in  dollars  of  LCC  element  1  Incurred  in  year  k 

CDKC  -  Contractor  depot  repair  cycle  time  In  hours 

CCTj  -  Annual  cost  to  operate  and  maintain  a  set  of  support  equipment 
Item  j,  expressed  as  a  fraction  of  the  acquistion  cost 

C0ND.j  -  Expected  fraction  of  unit  1  failures  resulting  in  unit 
condemnation 

CPS^  -  The  average  shipping  cost  in  dollars  per  shipment  of  unit  1 

CRSC  -  Resupply  time  In  hours  from  contractor  facility  to  CONUS  bases 

CRSO  -  Resupply  time  In  hours  from  contractor  facility  to  overseas 

bases 

CRUf  •  -  Cost  in  dollars  per  unit  for  spare  of  unit  1 

CSEj  -  Unit  cost  In  dollars  for  support  equipment  line  item  J 

Dj  -  Demand  rate  in  demands  per  hour  of  unit  1  on  the  depot  spare 

supply 

Dim  -  Demand  rate  in  demands  per  hour  for  spares  of  unit  1  at  base  m 
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Base  repair  technical  orders  cost  In  dollars 

Depot  repair  technical  orders  cost  in  dollars 

Operation  technical  orders  cost  in  dollars 

Annual  discount  factor  applied  to  future  costs 

Depot  repair  cycle  time  in  hours  for  units  which  can  be 
repaired  by  removal  and  replacement  operations  (RTS  type 
repairs) 

Depot  repair  cycle  time  In  hours  for' units  which  require 
actions  more  complex  than  removal  and  replacement  operations 
(NRTS  repairs) 

Depot  stock  safety  factor  in  standard  deviations 
Depot  training  cost  In  dollars 

Expected  delay  In  hours  for  repair  of  LRU  1  at  base  m  due  to 
Stockout  of  spare  SRU 

Expected  delay  in  hours  for  repair  of  LRU  1  at  base  m  due  to 
stockout  of  SRU  J 

Expected  LRU  backorders  at  base  m 

Expected  SRU  backorders  at  base  m 

Expected  delay  In  hours  in  RTS  repair  of  LRU  1  due  to  stockout 
of  spare  SRUs 

Expected  depot  delay  In  hours  In  RTS  repair  of  LRU  1  due  to 
stockout  of  SRU  j 

Expected  number  of  removals  of  unit  1  in  year  k 

Expected  resupply  time  delay  In  hours  due  to  depot  stockout  of 
unit  1 

Labor  standard  In  hours  for  failure  verification  of  unit  1 

Ratio  of  the  projected  system  Mean  Time  Between  Failures 
(MTBF)  In  year  k  to  the  Initial  MTBF 

Ratio  of  the  projected  system  MTBF  In  month  m  of  year  k  to  the 
Initial  system  MTBF 

Ratio  of  the  projected  system  MTBF  at  the  time  of  full 
Installation  to  the  initial  system  MTBF 
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Ie  -  Set  of  Indices  pertaining  to  LRUs 

Is  -  Set  of  Indices  pertaining  to  SRUs 

ISITE  -  Number  of  I  level  sites  at  which  aircraft  using  the  system  are 
deployed 

ISP  -  Initial  support  period  (years) 

ISYSh,  -  Number  of  I  level  systems  to  be  installed  at  site  m 

1*  -  Index  of  the  unit  which  provides  the  greatest  reduction  In 

expected  backorders  In  a  particular  Iteration  of  the  base 
level  spares  determination  algorithm 

Ob  -  Set  of  Indices  pertaining  to  line  Items  of  support  equipment 

required  at  base  level 

J(j  -  Set  of  Indices  pertaining  to  line  Items  of  support  equipment 

required  at  depot  level 

-  Set  of  Indices  pertaining  to  SRUs  contained  in  LRU  1 

LR,  -  Maintenance  level  of  repair  (initial  support  period)  for 
unit  1:  LRi  •  0  (flight  line);  «  I  (base);  »  2  (depot) 

LR2.j  -  Maintenance  level  of  repair  (final  support  period)  for  unit 
1:  LR2 -j  •  0  (flight  line);  •  1  (base);  ■  2  (depot) 

LREMi  -  Maintenance  level  of  removal  for  unit  1: 

LREM^  •  0  (flight  line);  ■  1  (base);  ■  2  (depot) 

LSER  -  Support  Equipment  required  for  repair  of  Item 

LV.j  -  Maintenance  level  of  failure  verification  (initial  support- 

period)  for  unit  1:  LV<  •  0  (flight  line);  ■  1  (base);  •  2 
(depot) 

LV2.J  -  Maintenance  level  of  failure  verification  (final  support 

period)  for  unit  i:  LV2f  ■  0  (flight  line);  •  1  (base);  •  2 
(depot) 

MTBFj  -  Mean  Time  Between  Failures  of  unit  1  in  hours 

"j  -  Number  of  sets  of  support  equipment  item  J  required  at  depot 

-  Current  spares  level  of  unit  1  at  base  m  In  a  particular 
Iteration  of  the  base  level  spares  determination  algorithm 

NACjj  -  Number  of  systems  installed  in  year  k 

NBASE  -  Total  number  of  bases  at  which  aircraft  using  the  system  are 

deployed 
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-  Number  of  bases  -  CONUS 

-  Number  of  bases  -  overseas 

-  Number  of  condemnation  spares  of  unit  1 


NEC 
NBO 
NCS1 

NCUMfc,,,  -  Cumulative  number  of  systems  installed  by  month  m  of  year  k 
NOS  -  Number  of  depot  work  shifts  per  day 

NI  *  Number  of  new  items  (no  Federal  Stock  Number  assigned)  In  the 

proposed  design  which  must  be  stocked  by  the  Government  to 
support  system  maintenance 

NIC  -  Number  of  I  level  sites  CONUS 

NIO  -  Number  of  I  level  sites  overseas 

NIS  -  Number  of  I  level  work  shifts 

NPB  -  Number  of  pages  of  base  repair  technical  orders 

NPD  -  Number  yf  pages  of  depot  repair  technical  orders 

NPO  -  Number  of  pages  of  operation  technical  orders 

NO}  -  Quantity  of  unit  1  required  per  system 

NREQjk  -  Number  of  sets  Of  Support  equipment  item,  j  required  in  year  k 

NRS<  -  Total  number  of  Initial  spares  required  for  unit  1 

NRSB^  -  Number  of  spares  of  unit  1  required  at  base  m 

NRSDj  -  Number  of  spares  of  unit  1  required  at  the  depot 

NRU  -  Number  of  replaceable  units  in  the  system  hardware 
configuration  (counting  the  system  itself) 

NRTS^  •  Expected  fraction  of  failures  of  unit  1  that  are  reparable 
onTy  at  depot  .  »•  •  • 

NSC  -  Total  number  of  systems  to  be  installed  on  aircraft  at  CONUS 
bases 

NS0  -  Total  number  of  systems  to  be  installed  at  overseas  bases 
NSE  -  Number  of  unique  line  Items  of  support  equipment 
NSYSm  -  Total  number  of  systems  to  be  installed  at  base  m 
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-  Total  number  of  systems  to  be  installed 

-  Operational  life  of  the  system  in  years 

-  Average  operating  hours  per  month  per  installed  system 

The  expected  hours  per  month  that  support  equipment  item  j  Is 
required  at  base  m 

-  Expected  hours  per  month  that  support  equipment  item  J  Is 
required  at  depot 

-  Average  labor  in  manhours  per  in-place  system  repair 

-  Average  labor  in  manhours  per  NRTS  repair  of  unit  i 

-  Average  materials  cost  in  dollars  per  In-place  system  repair 

-  Average  materials  cost  in  dollars  per  NRTS  repair  of  unit  1 

-  Average  labor  in  manhours  required  to  Isolate  a  failure  to 
unit  1,  remove  the  unit,  replace  it  with  a  spare,  and  verify 
the  corrective  action 

-  Resupply  time  In  hours  to  base  m 

-  Resupply  time  In  hours  between  the  depot  and  CONl'S  bases 

-  Resupply  time  In  hours  between  the  depot  and  overseas  bases 

-  Expected  fraction  of  system  failures  that  are  reparable 
In-place 

-  Expected  fraction  of  failures  of  unit  1  that  are  reparable  by 
removal  and  replacement  operations 

-  Consumable  materials  consumption  rate  in  dollars  per  manhour 
at  base  level 

t  Standard  base  labor  rate  In  dollars  per  manhour 

-  Consumable  materials  consumption  rate  In  dollars  per  manhour 
at  depot  level  for  final  support  period 

-  Standard  data  management  cost  in  dollars  per  page  per  year 

•  Consumable  materials  consumption  rate  in  dollars  per  manhour 
at  depot  level  for  initial  support  period 

-  Standard  depot  labor  rate  in  dollars  per  manhour  for  initial 
support  period 

-  Standard  depot  labor  rate  in  dollars  per  manhour  for  final 
support  period 
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SID  -  Standard  cost  in  dollars  per  copy  per  page  for  reproduction 
and  distribution  of  technical  data 

SIE  -  Standard  cost  in  dollars  per  item  for  entering  a  new  item  into 
the  Government  supply  system 

SIM  -  Standard  inventory  management  cost  in  dollars  per  year 
SIN  -  Installation  cost  in  dollars  per  system 

SPSC  -  Standard  cost  in  dollars  per  pound  for  packaging  and  shipping 

units  between  the  depot  and  CONUS  bases 

SPSO  -  Standard  cost  in  dollars  per  pound  for  packaging  and  shipping 
units  between  the  depot  and  overseas  bases 

Tf  -  Depot  stock  replenishment  time  in  hours  for  unit  1 

Tjm  -  Stock  replenishment  time  in  hours  for  unit  1  at  base  m 

TAT  -  Base  turnaround  time  in  hours 

T0TC0Spv-Total  life  cycle  cost  for  the  system  In  present  value  dollars 

T0TC0Su-  Total  life  cycle  cost  for  the  system  in  undiscounted  dollars 

UFP.j  -  Expected  fraction  of  removals  of  unit  1  that  will  be 
unverified  failures  (RTOKs) 

USERj.;  -  Support  equipment  item  j  usaoe  time  in  hours  for  repair  of 
J  unit  i 

USEV^  -  Support  equipment  Item  j  usage  time  in  hours  for  verification 
J  of  unit  1 

Wj  -  Height  in  pounds  for  unit  i 

WHPM  -  Working  hours  per  month  at  the  depot 

WHPS  -  Working  hours  per  month  at  the  site 

WP  -  Warranty  period  In  years 

WPR  -  Price  of  the  warranty  In  dollars 

-  A  variable  In  the  base  level  spares  determination  algorithm 
denoting  the  reduction  In  expected  backorders  at  base  m 
achieved  by  Increasing  the  current  spares  level  of  unit  1  at 
base  m  by  one 

o  (Statement)  -  A  variable  whose  value  is  1  if  the  statement  Is  true  and 
0  otherwise 
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EXHIBIT  7B 
BASE  RUN 


V 


Lift  CYCLE  COST  ANALYSIS  PR06RAM 


SIE : 

SBR: 

SOR: 

SDR2: 

SPSC: 

SPSOs 

SIDs 

SIMS 

SOM: 

SBMCS 

SDMC: 

S0C2: 

DPs 


NYS 

NBC  S 

NIC! 

N80S 

NIOS 

NSC  S 

NSOs 


NUMBER  OF 

NUMBER  OF 
2 
40 
20 

NUMBER  OF 

NUMBER  OF 
6 
4 


00081074 


STANDARD  ELEMENTS  FILE 


PARAMETER 


VALUE 


ITEM  ENTRY  COST/NEa  ITEM  1200.00 

base  labor  rate/huur  16.42 

OEPOT  LABOR  RATE/HOUR  29.43 

DEPOT  LABOR  RATE/H0UR.P2  29.43 

PACKAGING  &  SHIPPING  COST/LB.  -  CONUS  0.S8 

PACKAGING  4  SHIPPING  COST/LB.  -  OVERSEAS  0.72 

INITIAL  DATA  MGT.  COST/COPY/PAGE  0.0110 

ITEM  MGT.  COST/ITEM/YEAR  150.00 

DATA  MGT.  COST/PAGE/YEAR  97.55 

BASE  MATERIAL  CONSUMPTION  RATE  0.0 

DEPOT  MATERIAL  CONSUMPTION  RATE  8.84 

DEPOT  MATERIAL  CONSUMPTION  RATE.N2  8.84 

OISCOUNT  factor  0.10 


LOGISTIC  FACTORS  FILE 


PARAMETER  VALUE 


OPERATIONAL  LIFE  OF  SYSTEM  (YEARS)  20 
NUMBER  OF  BASES  -  CONUS  62 
NUMBER  OF  I -LEVEL  SITES  -  CONUS  10 
NUMBER  OF  BASES  -  OVERSEAS  6 
NUMBER  UF  I  LEVEL  SITES  -  OVERSEAS  1 
NUMbtR  OF  SYSTEMS  -  CONUS  2874 
NUMBER  OF  SYSTEMS  -  OVERSEAS  276 


SYSTEMS  AT  EACH  BASE  -  CONUS 

BASES  SYSTEMS  AT  BASE 

17 
41 
GO 

SYSTEMS  AT  EACH  I -LEVEL  SITE  -  CONUS 

SITES  SYSTEMS  AT  SITE 
267 
266 
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NUMRER  OF  SYSTEMS  aT  EACH  ttASt  -  OVERSEAS 


NUMBER 

OF 

BASES 

SYS l EMS  AT  BASE 

6 

46 

NUMBER 

OF 

SYSTEMS 

AT  EACH  I-LEVEL  SITE  -  OVERSEAS 

NUMBER 

OF 

SITES 

SYSTEMS  AT  SITE 

1 

276 

SIN:  COST/SYSTEM  INSTALLATION  8000.00 

Of!:  SYSTEM  OPERA!  ING  HOURS/MONTH  25.0 

NOS :  NUMBER  OF  DEPOT  nOHK  SHIFTS  2 

NIS:  NUMBER  OF  I  LEVEL  WORK  SHIFTS  2 

RSTC:  BASE  RESUPPLY  TIME  -  CONUS  (HOURS)  396. 

RSTO:  BASE  RESUPPLY  TIME  -  OVERSEAS  (HOURS)  38*. 

DMC:  DEPOT  REPLACEMENT  CYCLE  TIME  (HOURS)  612. 

DRC:  DEPOT  REPAIR  CYCLE  TIME  (HOURS)  122*. 

BOSC:  SHIPPING  TIME  TO  DEPOT  -  CONUS  (HOURS)  1**. 

8DS0:  SHIPPING  TIME  TO  DEPOT  -  OVERSEAS  (HOURS)  252. 

TAT:  BASE  TURNAROUND  TIME  (HOURS)  96. 

WP:  SYSTEM  WARRANTY  PERIOD  (YEARS)  1 

ISP:  INITIAL  SUPPORT  PERIOD  (YEARS)  1 

AOl :  SPARES  OBJECTIVE  (SYSTEM)  0.990 

A02:  SPARES  OBJECTIVE  (SHOP)  0.990 

OSSF :  DEPOT  STOCK  SAFETY  FACTOR  1.65 


ACTIVATION  SCHEOULE 


MONTH 


YEAR 

1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

1 

52 

52 

32 

32 

32 

52 

52 

52 

52 

52 

52 

52 

2 

52 

52 

32 

32 

32 

52 

52 

52 

52 

52 

52 

52 

3 

52 

52 

52 

32 

52 

52 

53 

53 

53 

53 

53 

53 

* 

53 

53 

53 

33 

33 

33 

53 

53 

53 

53 

53 

53 

5 

53 

53 

53 

53 

33 

53 

53 

53 

53 

53 

53 

53 

HARDWARE  DEFINITION  FILE 


NUMBER  OF  REPLACtABLE  UNITS  »  1* 


LN 

IN  NOMENCLATURE 

NO 

CRU 

MTBF 

UFP 

N 

FVS 

RLS 

RRS 

1 

1  SYSTEM 

1 

12.000. 

**8*7. 

0.000 

17.5 

0.0 

0.0 

0.0 

2 

2  OATA  ACQUISITION 

1 

8*000. 

12*299. 

0.020 

11.5 

0.0 

0.0 

1.0 

3 

3  MOTHERBOARD  ASSY 

1 

700. 

10*000*000. 

0.050 

0.8 

0.3 

1.7 

0.0 

* 

3  SIGNAL  CONDITIONER 

1 

1*000. 

73.899. 

0.050 

0.* 

0.3 

1.7 

0.0 

5 

3  SIGNAL  CONDITIONER 

1 

1.000, 

65*902. 

0.050 

0.* 

0.3 

1.7 

0.0 

6 

3  RTU  1533 

1 

1**00. 

88*028. 

0.050 

0.* 

0.3 

1.7 

0.0 

7 

3  CPU  AND  MEMORY 

1 

1**00. 

68*078. 

0.050 

0.* 

0.3 

1.7 

0.0 

8 

3  ADC  CONTROL  ANU  Iu 

1 

1*000. 

72.67*. 

0.050 

0.3 

0.3 

1.7 

0.0 

r 

r 
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9 

3 

CHASSIS  PSU  Da 

1 

1*500 

10 

2 

MEMORY  MODULE 

1 

4.000 

11 

3 

MEMORY  STORAGE 

1 

1.500 

12 

3 

memory  CONTROL  1 

1 

600 

13 

3 

MEMORY  CONTROL  2 

1 

600 

14 

3 

CHASSIS  PROTECTION 

1 

1.300 

LN 

RMS 

NRTS 

COND 

LV 

LV2 

LSEV 

USEV 

LR 

1 

0. 

O.OOU 

O.0O0 

0 

0 

0 

0.0 

0 

2 

0. 

0.000 

0.000 

2 

1 

1 

0.0 

2 

3 

50. 

0.9H0 

0.020 

2 

2 

2 

0.3 

2 

4 

50. 

0.960 

0 .020 

2 

2 

2 

0.3 

2 

5 

50. 

0.980 

0 .020 

2 

2 

2 

0.3 

2 

6 

50. 

0.960 

0.020 

2 

2 

2 

0.3 

2 

7 

50. 

0.980 

0.020 

2 

2 

2 

0.3 

2 

8 

50. 

0.980 

0.020 

2 

2 

2 

0.3 

2 

9 

50. 

0.980 

0.020 

2 

2 

2 

0.3 

2 

10 

0. 

0.000 

0.000 

2 

1 

1 

0.0 

2 

11 

50. 

0.960 

0.020 

2 

2 

2 

0.3 

2 

12 

50. 

0.980 

0.020 

2 

2 

2 

0.3 

2 

13 

50. 

0.980 

0.020 

2 

2 

2 

0.3 

2 

14 

50. 

0.980 

0.020 

2 

2 

2 

0.3 

2 

76*247. 

0.050 

9.0 

0.3 

1.7 

0.0 

8*000. 

0.020 

6.0 

0.0 

0.0 

1.0 

12.195. 

0.050 

0.5 

0.3 

1.7 

0.0 

50*000. 

0.050 

O.S 

0.3 

1.7 

0*0 

50*000. 

0.050 

0.5 

0.3 

1.7 

0.0 

333*333. 

0.050 

4.5 

0.3 

1.7 

0.0 

LSER 

USER 

LR2  1  2  3  4 

1 

2  3 

4 

—  —  —  — 

— 

—  — 

• 

0 

0 

0 

0 

0 

0.0 

0.0 

0.0 

0.0 

1 

1 

0 

0 

0 

0.6 

0.0 

0.0 

0.0 

2 

2 

0 

0 

0 

0.8 

0.0 

0.0 

0.0 

2 

2 

0 

0 

0 

0.8 

0.0 

0.0 

0.0 

2 

2 

0 

0 

0 

0.8 

0.0 

0.0 

0.0 

2 

2 

0 

0 

0 

0.8 

0.0 

0.0 

0.0 

2 

2 

0 

0 

0 

0.8 

0.0 

0.0 

0.0 

2 

2 

0 

0 

0 

0.8 

0.0 

0.0 

0.0 

2 

2 

0 

0 

0 

0.8 

0.0 

0.0 

0.0 

1 

1 

0 

0 

0 

0.6 

0.0 

0.0 

0.0  - 

2 

2 

0 

0 

0 

0.8 

0.0 

0.0 

0.0 

2 

2 

0 

0 

0 

0.8 

0.0 

0.0 

0.0 

2 

2 

0 

0 

0 

0.8 

0.0 

0.0 

0.0 

2 

2 

0 

0 

0 

0.8 

0.0 

0.0 

0.0 

SUPPORT  EUUIPMtNT  DEFINITION  FILE 
NUMBER  OF  LINE  ITEMS  OF  SUPPORT  EQUIPMENT  *  2 

LINE  NUMBER  NOMENCLATURE  COST(CSE)  06M  COST  FACTOR (COM) 


1  ONE  TEST  SET 

2  GOVT  FUR  EQUIP 


50.000. 

0. 


0.010 

0.0 


CONTRACTOR  DATA  FILE 


PARAMETER  VALUE 


ACS:  ACUUISITION  CUST/SYSTEM  12.000. 

8Tc:  base  level  training  cost  12.000. 

OTC :  DEPOT  LEVEL  JHAIN1NG  COST  12.000. 

0C8 :  DATA  ACQUISITION  COST  (BASE  LEVEL  MANUALS)  50.000. 

OCD:  DATA  ACUUISITION  COST  (DEPOT  LEVEL  MANUALS)  100.000. 

OCO:  DATA  ACUUISITION  COST  (OTHER)  6*000. 

NPtf:  PAGES  OF  OATA  (BASE  LEVEL  MANUALS)  71 

NPO:  PAGES  OF  OATA  (OEPUl  LEVEL  MANUALS)  68 

NPO :  PAGES  oF  DATA  (OTHER)  30 

NT:  NUMBER  of  nF.r  INVENTORY  items  a 

CRSC :  CONTRACTOR  BASt  RESUPPLY  TIME  -  CONUS  2A0. 

CRSO:  CONTRACTOR  BASE  RESUPPLY  TIME  -  OVERSEAS  400. 
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COHC:  CONTRACTOR  HtPAlK  CYCLE  TIME 

wpr:  Warranty  price 


720 

106*000 


RELIABILITY  GROWTH  PROFILE 

1.00  1.0*  1.12  1.16  1.24  1.31  i.37  1.43  1.49  1.5S 
1.55  1 .55  US's  1.5b  1.5b  1.55  1.55  1.55  1.55  1.55 
1.55 


SUPPORT  tUUIPMENT  REUUIREMENTS 


LINE  ITEMS  OF  SUPPORT  EQUIPMENT  REQUIRED  AT  BASE  LEVEL 


EQUIPMENT 

UUANTITY 

COST 

ONE  TEST  SET 

11 

550*000. 

LINE  ITEMS  OF  SUPPORT  EQUIPMENT  REQUIRED  AT  DEPOT  LEVEL 


EQUIPMENT 

QUANTITY 

COST 

ONE  TEST  SET 

1 

50*000 

60V T  FUR  EQUIP 

1 

0 

SPAHES 

REQUIREMENTS 

(DETAILED) 

DEPOT 

LEVEL  SPARES 

REQUIREMENTS 

REPLACEABLE  UNIT 

SPARES 

COST 

DATA  ACQUISITION 

12 

96*000 

M0THER80AR0  ASSY 

1 

700 

SIGNAL  CONDITIONER  1 

4 

4*000 

SIGNAL  CONUI T IONER  2 

5 

5*000 

RTU  1553 

4 

5*600 

CPU  ANO  MEMORY 

5 

7*000 

ADC  CONTROL  ANU  10 

4 

4*000 

CHASSIS  PSU  OA 

4 

6*000 

MEMORY  MODULE 

17 

68*000 

MEMORY  STORAGE 

16 

24*000 

MEMORY  CONTROL  1 

6 

3*600 

MEMORY  CONTROL  2 

6 

3*600 

CHASSIS  PROTECTION 

2 

2*600 
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BASE  LEVEL  SHAKES  REQUIREMENTS  <CONUS) 


SYSTEMS/ 

BASE  BASES 


17 

2 

LRU  SHARES 

REQUIREMENTS 

REPLACEABLE  UNIT 

SPARES/BASE 

TOTAL 

COST 

DATA  ACQUISITION 

0 

0 

0. 

MEMORY  MOOULE 

u 

0 

0. 

41 

40 

LRU  SPARES 

REQUIREMENTS 

REPLACEABLE  UNIT 

SPARES/BASE 

TOTAL 

COST 

DATA  ACQUISITION 

0 

0 

0. 

MEMORY  MOOULE 

0 

0 

0. 

60 

20 

LRU  SPARES 

REQUIREMENTS 

replaceable  unit 

SPARES/BASE 

TOTAL 

COST 

UATA  ACQUISITION 

0 

0 

0. 

MEMOHY  MOOULE 

0 

0 

0. 

287 

6  SRU  SPARES 

REQUIREMENTS 

REPLACEABLE  UNIT 

SPARES/BASE 

TOTAL 

COST 

MOTHERBOARD  ASSY 

0 

0 

0. 

SIONAL  CONDITIONER 

1 

0 

0 

0. 

SIONAL  CONDITIONER 

2 

0 

0 

0. 

RTU  1SS3 

0 

0 

0. 

CPU  ANO  MEMORY 

0 

0 

0. 

ADC  CONTROL  ANO  10 

0 

0 

0. 

CHASSIS  PSU  DA 

0 

0 

0. 

MEMORY  storage 

0 

0 

0. 

MtMORY  CONTROL  1 

0 

0 

0. 

MEMORY  CONTROL  2 

0 

0 

0. 

CHASSIS  PROTECTION 

0 

0 

0. 

288 

4  SRU  SPARES 

REQUIREMENTS 

REPLACEABLE  UNIT 

SPARES/bASE 

TOTAL 

COST 

MOTHERBOARD  ASSY 

0 

0 

0. 
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SIGNAL  CONUll I  ONER  1  0 
SIGNAL  CONOIT IONER  2  0 
RTU  1S53  0 
CPU  ANO  MEMORY  0 
AOC  CONTROL  ANO  10  0 
CHASSIS  PSU  DA  0 
MtMOHY  STORAGE  0 
MEMORY  CONTROL  1  0 
MtMOHY  CONTROL  2  0 
CHASSIS  RHOTECT ION  0 


0 

0 

0 

0 

0 

0 

0 

0 

0 

0 


0. 

0. 

0. 

0. 

0. 

0. 

0. 

0. 

0. 

0. 


BASE  LEVEL  SHARES  REQUIREMENTS  (OVERSEAS) 


SYSTEMS/ 

BASE  BASES 


46  6  LRU  SPARES  REQUIREMENTS 


REPL ACt ABLt  UNIT  SPARES/BASE  TOTAL  COST 


DATA  ACQUISITION  00  0. 

MEMORY  MOOULt  00  0. 


276  1  SHU  SPARES  REQUIREMENTS 


REPLACEABLE  UNIT  SPARES/BASE  TOTAL  COST 


MOTHERBOARD  ASSY  0 
SIGNAL  CONDITIONER  1  0 
SIGNAL  CONDITIONER  2  0 
RTU  1 553  0 
CPU  ANU  MEMORY  0 
AUC  CONTROL  ANO  10  0 
CHASSIS  RSU  DA  0 
MEMORY  STORAGt  0 
MEMORY  CONTROL  1  0 
MtMORY  CONTROL  2  0 
CHASSIS  RROTECflON  0 


0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 


0. 

0. 

0. 

0. 

0. 

0. 

0. 

0. 

0. 

0. 

0. 


CONDEMNATION  SPARES  REQUIREMENTS 


REPLACEABLE  UNIT  spares 


COST 


OATA  ACQUISITION  0 
MOTHERBOARD  ASSY  1 
SIGNAL  CONDITIONER  1  4 
SIGNAL  CONDITIONER  £.  4 


0. 

700. 

4.000. 

4.000. 
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RTU  1553 

3 

4*200. 

CPU  AND 

MEMORY 

4 

5*600. 

AOC  CONTROL  AND  10 

4 

4*000. 

CHASSIS 

PSU  OA 

3 

4*500. 

MEMORY 

MOOULE 

0 

0. 

MEMORY 

STORAGE 

19 

28*500. 

MEMORY 

CONTROL  1 

5 

3*000. 

MEMORY 

CONTROL  2 

5 

3*000. 

CHASSIS 

PROTECTION 

1 

1*300. 

SPARES  REOUIREMENTS  (UNIT 

SPARES 

REPLACEABLE  UNIT  DEPOT  BASE  CONDEMNATION 

TOTALS! 

TOTAL 

TOTAL 

COST 

DATA  ACQUISITION 

12 

0 

0 

12 

96*000 

MOTHERBOARD  ASSY 

1 

0 

1 

2 

1*400 

SIGNAL  CONDITIONER  1 

4 

0 

4 

8 

8*000 

SIGNAL  CONDITIONER  2 

S 

0 

4 

9 

9*000 

RTU  1553 

4 

0 

3 

7 

9*800 

CPU  AND  MEMORY 

5 

0 

4 

9 

12*600 

ADC  CONTROL  AND  10 

4 

0 

4 

8 

8*000 

CHASSIS  PSU  DA 

4 

0 

3 

7 

10*500 

MEMORY  MODULE 

i? 

0 

0 

17 

68*000 

MEMORY  STORAGE 

16 

0 

19 

35 

52*500 

MEMORY  CONTROL  1 

6 

0 

5 

11 

6*600 

MEMORY  CONTROL  2 

6 

0 

5 

11 

6*600 

CHASSIS  PROTECTION 

2 

0 

1 

3 

3*900 

MANPOWER 

REQUIREMENTS 

(MANHOURS  PER  YEAR) 

YEAR 

FLIGHT  LINE 

BASE 

DEPOT 

1 

21. 

0. 

0. 

2 

Sft. 

2. 

104. 

3 

87. 

3. 

163. 

4 

116. 

4. 

217. 

5 

142. 

5. 

264. 

6 

149. 

S* 

277. 

7 

142. 

5. 

265. 

8 

137. 

5. 

254. 

9 

131. 

4. 

244. 

10 

128. 

4. 

239. 

11 

128. 

4. 

239. 

12 

12ft. 

4. 

239. 

13 

12a. 

4. 

239. 

14 

128. 

4  e 

239. 

15 

1  id <3  • 

4. 

239. 

16 

128. 

4. 

239. 

17 

128. 

4. 

239. 

18 

128. 

4. 

239. 

19 

128. 

4  e 

239. 

20 

128. 

4. 

239. 
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LRU  OPERATING  HOURS  AND  FAILURES 


LINE  REPLACEABLE  UNIT 


DATA  ACQUISITION 

Yt  AR 

REMOVALS 

RTOK'S 

FAILURES 

OP. HOURS 

1 

6.2 

0.2 

a.o 

101400.0 

2 

22.0 

0.4 

21.6 

2 88600.0 

J 

34.4 

0.7 

33.8 

476325.0 

4 

45.6 

0.9 

44.9 

666750.0 

s 

55.9 

1.1 

54.8 

857550.0 

b 

56.6 

1.2 

57.5 

945000.0 

r 

56.1 

1.1 

55.0 

945000.0 

b 

53.8 

1.1 

52.7 

945000.0 

51.7 

1.0 

50.6 

945000.0 

lu 

30.6 

1.0 

49.6 

945000.0 

1 1 

50.6 

1.0 

49.6 

945000.0 

12 

50.6 

1.0 

49.6 

945000.0 

13 

50.6 

1.0 

49.6 

945000.0 

14 

50.6 

1.0 

49.6 

945000.0 

IS 

50.6 

1.0 

49.6 

945000.0 

lt> 

50.6 

1.0 

49.6 

945000.0 

17 

50.6 

1.0 

49.6 

945000.0 

lb 

50.6 

1.0 

49.6 

945000.0 

19 

50.6 

1.0 

49.6 

945000.0 

« 

2u 

50.6 

1.0 

49.6 

945000.0 

MEMORY  MOOULE 

YEAH 

REMOVALS 

RTOK'S 

FAILURES 

OP. HOURS 

1 

12.6 

0.3 

12.3 

101400.0 

2 

33.9 

0.7 

33.2 

288600.0 

3 

53.0 

1.1 

51.9 

476325.0 

4 

70.4 

1.4 

69.0 

666750.0 

5 

86.0 

1.7 

84.3 

857550.0 

b 

90.1 

1.6 

88.3 

945000.0 

7 

66.3 

1.7 

84.5 

945000.0 

H 

82.7 

1.7 

81.1 

945000.0 

V 

79.4 

1.6 

77.9 

945000.0 

10 

77.8 

1.6 

76.2 

945000.0 

11 

77.8 

1.6 

76.2 

945000.0 

12 

77.8 

1.6 

76.2 

945000.0 

13 

77.6 

1.6 

76.2 

945000.0 

14 

77.6 

1.6 

76.2 

945000.0 

15 

77.6 

1.6 

76.2 

945000.0 

16 

77.8 

1.6 

76.2 

945000.0 

17 

77.8 

1.6 

76.2 

945000.0 

16 

77.8 

1*6 

76.2 

945000.0 

19 

77.8 

1.6 

76.2 

945000.0 

20 

77.8 

1.6 

76.2 

945000.0 

ACQUISITION 

COST  BREAKDOWN 

8Y  CATE60RY 

AND  BY 

YEAR 
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CATEGORY 


YEAR 


1 

2 

3 

4 

5 

6 

7 

INIT 

TRAIN 

12000. 

12000. 

0. 

0. 

0. 

0. 

0. 

OATA 

AO 

660  00  . 

looooo. 

0. 

0. 

0. 

0. 

0. 

ITEM 

ENT 

0. 

4«00. 

0. 

0. 

0. 

0. 

0. 

DATA 

MGMT 

3666. 

2462. 

0. 

0. 

0. 

0. 

0. 

PRIM 

HR 

7488000. 

7488000. 

7660000. 

7632000. 

7632000. 

0. 

0. 

S.E. 

U. 

bOOOOO  . 

0. 

0. 

0. 

0. 

0. 

INIT 

SP 

68022. 

68022. 

56580. 

59138. 

59138. 

0. 

0. 

INST 

4992000. 

4992000. 

5040000. 

5088000. 

5088000. 

0. 

0. 

WARRANTY 

209WH. 

20998. 

21200. 

21402. 

21402. 

0. 

0. 

CATEGORY 

YEAR 

6 

9 

10 

11 

12 

13 

14 

INIT  TRAIN 

0. 

0. 

0. 

0. 

0. 

0. 

0. 

DATA  AO 

0. 

0. 

0. 

0. 

0. 

0. 

0. 

ITEM  ENT 

0. 

0. 

0. 

0. 

0. 

0. 

0. 

DATA  MGMT 

0. 

0. 

0. 

0. 

0. 

0. 

0. 

PRIM  HW 

0. 

0. 

0. 

0. 

0. 

0. 

0. 

S.E. 

0. 

0. 

0. 

0. 

0. 

0. 

0. 

INIT  SP 

0  • 

0. 

0. 

0. 

0. 

0. 

0. 

INST 

0. 

0. 

0. 

0. 

0. 

0. 

0. 

WARRANTY 

0. 

0. 

0. 

0. 

0. 

0. 

0. 

CATEGORY 

YEAR 

16 

16 

17 

18 

19 

20 

21 

INIT 

TRAIN 

0. 

0. 

0. 

0. 

0. 

0. 

DATA 

AO 

0. 

0. 

0. 

0. 

0. 

0. 

ITEM 

ENT 

0. 

0. 

0. 

0. 

0. 

0. 

DATA 

MGMT 

0. 

0. 

0. 

0. 

0. 

0. 

PRIM 

HW 

0. 

0. 

0. 

0. 

0. 

0. 

S.E. 

0. 

0. 

0. 

0. 

0. 

0. 

INIT 

SP 

u. 

0. 

0. 

0. 

0. 

0. 

INST 

0. 

0. 

0. 

0. 

0. 

0. 

WARRANTY 

0. 

0. 

0. 

0. 

0. 

0. 

0  M 

COST 

bHtAKUOWN  BY  CATEGORY 

AND 

BY  YEAR 

CATEGORY 

1 

2 

YFAR 

3 

4 

5 

6 

7 

ELT  LN  MT 

34  1. 

918. 

1435. 

1909. 

2331. 

2443. 

2338. 

BASE  MT 

0. 

30. 

47. 

63. 

77. 

81. 

77. 

DEPO  MT 

0. 

6641. 

10230. 

13608. 

16614. 

17411. 

16664. 

ITEM  MGMT 

0. 

600. 

600. 

600. 

600. 

600. 

600. 

DATA  MGMT 

9863. 

16486. 

16486. 

16486. 

16486. 

16486. 

16486. 

PK  4  SHP 

201. 

71. 

111. 

147. 

179. 

188. 

180. 

S.E.  MT. 

0. 

6653. 

5752. 

5853. 

5954. 

6000. 

6000. 

CATEGORY 

YEAH 
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a 

9 

10 

11 

12 

13 

FLT  LN  MT 

2242. 

2153. 

2107. 

2107. 

2107. 

2107 

BASE  MT 

74. 

71. 

70. 

70. 

70. 

70 

DEPO  MT 

13977. 

15346. 

15022. 

15022. 

15022. 

15022 

ITEM  MGMT 

600. 

6U0. 

600. 

600. 

600. 

600 

DATA  MGMT 

16466. 

16486. 

16486. 

16486. 

16486. 

16486 

PK  6  SrtP 

1  73. 

1 66  . 

162. 

162. 

162. 

162 

S.E.  MT. 

6000. 

6000. 

6000. 

6000. 

6000. 

6000 

CATEGORY 

15 

16 

YEAR 

17 

18 

19 

20 

FLT  LN  MT 

2107. 

2107. 

2107. 

2107. 

2107. 

2107 

BASE  MT 

70. 

70. 

70. 

70. 

70. 

70 

DEPO  MT 

15022. 

15022. 

15022. 

15022. 

15022. 

15022 

ITEM  MGMT 

600. 

60b. 

600. 

600. 

600. 

600 

DATA  MGMT 

16466. 

16486 . 

16486. 

16486. 

16486. 

16486 

PK  6  SHP 

162. 

162. 

162. 

162. 

162. 

162 

S.E.  MT. 

6000. 

6U00. 

6000. 

6000. 

6000. 

6000 

TOTAL  COST  SUMMARY  <BY  CATE60RY ) 


UNOISCOUNTED 

PRESENT  VALUE 

COST 

COST 

INITIAL  TRAINING 

24.000. 

22.909. 

DATA  ACQUISITION 

156*000. 

146.909. 

ITEM  ENTRY 

4.800. 

4.364. 

DATA  MANAGEMENT 

6.118. 

5.894. 

PRIME  HARDWARE 

37.800.000. 

31,490,026. 

SUPPORT  EQUIPMENT 

600.000. 

545,455. 

INITIAL  SPARES 

292.900. 

244,006. 

INSTALLATION 

25.200*000. 

20,993,351. 

WARRANTY 

106.000. 

88,305. 

TOTAL  ACQUISITION  COST 

64.189.818. 

53,541,220. 

FLIGHT  LINE  MAINT. 

39.291. 

16.765. 

BASE  LEVEL  MaInT. 

1.285. 

542. 

DEPOT  LEVEL  mAINT. 

277.631. 

117,064. 

ITEM  MANAGEMENT 

11.400. 

5,019. 

DATA  MANAGEMENT 

323.086. 

147,757. 

PACKING  h  SHIPPING 

3.200. 

1.466. 

S.E. MAINTENANCE 

113.211. 

49.527. 

TOTAL  O&M  COST 

769,105. 

338,139. 

TOTAL  LIFE  CYCLE  COST 

64.958,923. 

53.879,359. 

TOTAL 

COS!  SUMMARY  (BY 

YEAR) 
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14 

2107. 

70. 

1S022. 

600. 

16486. 

162. 

6000. 


21 
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SYSTEM  OPERATIONAL  LIFE  =  20  YEARS 


YEAR  Of 

UNDISCOUNTED 

PRESENT  VALUE 

PR06RAM 

COST 

COST 

1  12,041,072.  12,641,072. 


2 

13,308,580. 

12,098,715 

3 

12,714,441. 

10,507,813 

4 

12,839,206. 

9,646,298 

5 

12,842,781. 

8,771,808 

6 

43,209. 

26*829 

7 

42,345. 

23,902 

8 

41,552. 

21,323 

9 

40,821. 

19,043 

10 

40,447. 

17,154 

11 

40,447. 

15,594 

12 

40,447. 

14,177 

13 

40,447. 

12,888 

14 

40,447. 

11,716 

15 

40,447. 

10,651 

16 

40,44  7 . 

9,683. 

17 

40,447. 

8,803. 

18 

40,44/. 

8,002 

19 

40,447. 

7,275 

20 

40,447. 

6,613 

TOTAL 

64,958,923. 

53,879,359. 
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EXHIBIT  7C 

SENSITIVITY  ANALYSIS  OF 
COST  PER  SYSTEM  INSTALLATION 
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btNSlIlvlTY  ANALYSIS 


SENSITIVITY 

PARAMETER 

SIN 


6000.000 

12000.000 

lbOOO.OOO 

20000.000 


UNUlSCOUNTEO 

total  cost 


b4.9BB.923. 
77.SSB.92i. 
90. | SB .923. 

102. 7S8.923. 


PRESENT  VALUE 
TOTAL  COST 


S3.879.3S9. 
6<».  37b.  034. 
74.872.710, 
BS.3b9.38S. 
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EXHIBIT  7D 

SENSITIVITY  ANALYSIS  OF 
SYSTEM  OPERATING  HOURS  PER  MONTH 
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SENSITIVITY  ANALYSIS 


SENSITIVITY 

PARAMETER 

OH 


25.000 

SO.OOC 

T5.000 

100.000 


UNDISCOUNTED 
TOTAL  COST 


64*958.923. 
65*516 *032. 
66*046*840. 
66*589,049. 


PRESENT  VALUE 
TOTAL  COST 


53,879,359. 
54,211,549. 
54,521,831. 
54,84 1.609. 
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APPENDIX  A 

PARAMETER  REQUIREMENTS  OF  VARIOUS  AGENCIES 


AlACStARCH  MANUFACTURING  COMPANY 


APPENDIX  A 


PARAMETER  REQUIREMENT  OF  VARIOUS  AGENCIES 


A  I i st  of  the  parameter  requirements  of  the  various  agencies  involved  with 
crash  investigations  is  as  follows: 

(a)  NTSB  Recommendations  A-78-27  through  A-78-29 

(b)  USAF  Statement  of  Need 

(c)  Statistical  data  for  F— 15,  F— 16,  and  A-10  accidents 

(d)  USN  parameter  list  for  F/A-18 

(e)  UK  Civil  Aviation  Authority  Spec  10 

(f)  List  prepared  by  United  Kingdom  engineering  advisor  to  the  Civil 
Aviation  Authority  and  the  RAF 

(g)  Typical  list  for  a  United  Kingdom  high-performance  military  aircraft 

NOTE:  This  list  was  not  used  in  the  generation  of  the  recommended 

parameter  list  for  the  CSFDR  study  since  it  was  not  available 
until  late. 
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NATIONAL  TRANSPORTATION  SAFETY  BOARD 

WASHINGTON,  D.C. 


ISSUED:  April  13,  1978 


Forwarded  to: 

Honorable  Langhome  M.  Bond 
Administrator 

Federal  Aviation  Administration 
Washington,  D.C.  20591 


SAFETY  RECOMMENDAT I  ON (S) 
A-78-27  through  29 


The  National  Transportation  Safety  Board  is  concerned  about  the 
number  of  accidents  involving  complex  fixed  wing,  multiengine  aircraft 
in  air  taxi  and  corporate/executive  operations  in  which  the  accident 
circumstances  remain  unknown.  Of  the  194  fatal  accidents  in  these 
operations  from  1970  to  1977,  cause  has  not  been  determined  for 
34  of  the  accidents.  (See  Attachment  1.)  In  addition  to  the  accidents 
reflected  in  the  data  in  Attachment  1,  the  Safety  Board  has  recently 
investigated  or  is  investigating  five  other  accidents  in  the  corporate/ 
executive  fleet  aloneV  in  which  there  appears  to  be  little  hope  of 
determining  definitive  cause.  These  accidents,  which  have  occurred 
within  the  past  18  months,  have  resulted  in  26  fatalities. 

Kith  the  continued  growth  in  the  numbers  of  complex  multiengine 
aircraft  in  general  aviation,  particularly  in  corporate/executive  operations 
and  air  taxi/commuter  service,  and  the  frequent  operation  in  unfavorable 


T7  Accidents  under  recent  investigation: 

Grumman  Gulfstream  II  (G1159),  N500J,  Johnson  6  Johnson,  Inc., 

Hot  Springs,  Virginia,  September  26,  1976. 

Lear  23,  N332PC,  Jet  Avia  Limited,  Flint,  Michigan,  January  6,  1977. 

Falcon  10,  N60MB,  Mountain  Bell  Co.,  near  Denver,  Colorado,  April  3, 
1977. 

BH  125-600A,  N40PC,  Southern  Company  Services,  Inc.,  McLean,  VA, 
^pril  28,  1977. 

Lear  25,  N999HG,  Champion  Homes,  near  Sanford,  NC,  September  8,  1977. 
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environments,  we  believe  that  recorders  are  urgently  needed.  In  fact, 
we  believe  that  these  recorders  are  as  justified  as  those  installed  in 
the  air  carrier  fleet  in  1959.  At  that  time,  high  speed,  increased 
reliance  on  avionic  equipment,  and  lack  of  eye  witnesses  combined  to 
limit  the  investigative  evidence  and  often  eliminated  chances  of 
determining  cause.  These  same  factors  are  hindering  today's 
investigations  of  accidents  involving  complex  multiengine  aircraft  in 
air  taxi  and  corporate  executive  operations. 

Accident  investigation  experience  with  air  cai.ier  aircraft  has 
proven  that  cockpit  voice  recorders  (CVT?)  and  flight  data  recorders 
(FDR)  have  been  invaluable  tools  in  identifying  aircraft  design 
deficiencies,  common  operational  problems,  shortcomings  in  the  air 
traffic  control  system,  and  the  effects  of  meteorological  phenomena  on 
aircraft  performance.  In  almost  every  accident  investigation  involving 
these  aircraft  during  the  past  1C  years,  one  or  both  of  these  recorders 
provided  investigators  with  the  clues  necessary  to  piece  together  the 
circumstances  of  the  accident.  To  its  credit,  the  aviation  community 
has  always  responded  to  these  accident  findings  by  instituting  immediate 
remedial  actions,  or  at  the  very  least,  by  researching  identified 
problem  areas.  The  result  has  been  continued  improvement  in  aviation 
safety. 

The  value  of  the  FDR,  and  in  particular  of  the  digital  FDR,  has 
become  evident  in  the  investigation  of  a  number  of  air  carrier  accidents 
in  which  wind  shear  was  a  primary  causal  factor.  The  recorded  data 
have  provided  a  means  for  accurately  determining  the  flight  profiles  and 
the  direction  and  magnitude  of  winds.  They  have  also  provided  sufficient 
information  for  programming  aircraft  simulators  so  that  the  condition 
encountered  by  the  pilots  could  be  reproduced  in  real  time.  Simulation 
based  on  FDR  data  has  made  it  possible  to  explore  human  factors  such 
as  restricted  visual  cues  which  hinder  prompt  recognition  of  a  developing 
descent  rate  and  accurate  assessment  of  the  pitch  attitude  change  required 
to  arrest  the  descent  before  impact. 

At  least  one  manufacturer  of  corporate/executive  aircraft  has 
recognized  the  long-term  value  of  the  FDR  and  CVR  and  is  providing 
space  and  power  for  the  FDR  and  installing  a  CVR  in  every  aircraft  of 
this  category  manufactured.  As  corporate  flying  becomes  an  ever-increasing 
part  of  the  transportation  system,  corporate  operators  are  also  discovering 
that  it  is  to  everyone's  advantage  to  install  CVR's  and  FDR's  aboard 
their  aircraft.  A  corporate  flight  department’s  operation  is  invariably 
suspect  in  the  eyes  of  general  aviation  antagonists  after  an  accident 
for  which  the  precise  cause  is  unknown. 
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The  economic  benefits  of  the  FDR  and  CVR  are  becoming  apparent  as 
veil.  The  inability  to  properly  determine  the  cause  of  an  accident  can 
be  costly,  not  only  because  of  the  failure  to  determine  proper  preventive 
measures,  but  also  because  of  liability  of  the  manufacturers,  the  operator, 
and  the  Government. 

In  addition,  corporations  and  'air  taxi  operators  are  providing 
transportation  in  lieu  of  available  Part  121  air  carrier  transportation. 
These  passengers  are  not  being  afforded  a  level  of  safety  equivalent  to 
that  of  air  carriers.  The  Safety  Board  believes  an  equivalent  level  can 
only  be  effected  in  the  long  term  by  the  installation  of  flight  recorders. 

The  Safety  Board  believes  that  an  industry  which  has  made  the 
micro-computer  a  household  tool  could  develop  a  reasonably  priced,  light 
weight,  small-volume,  solid  state  digital  flight  data  recorder  and  an 
equally  inexpensive  cassette  type  cockpit  voice  recorder  which  would 
serve  the  intent  of  the  flight  recorder  requirement.  In  fact,  one 
manufacturer  is  developing  a  very  small  digital  flight  data  recorder 
under  contract  for  the  U.S.  Army  which  will  employ  the  latest  electronic 
technology  and  will  be  capable  of  recording  over  30  minutes  of  data  for 
Piore  than  15  parameters. 

This  system  is  to  use  a  microprocessor  to  decide  which  data  should 
be  stored  and  when,  and  a  nonvolatile  solid-state  memory  instead  of 
recording  tape.  Because  no  recording  tape  is  used,  the  system  will  be 
virtually  maintenance  free.  Whereas,  current  FDR's  of  the  scribed  metal 
foil  variety  record  only  four  variable  parameters,  cost  $15,000  to 
$20,000  to  install,  and  weigh  40  pounds,  the  U.S.  Army  plans  for  their 
new  unit  to  cost  $10,000,  including  installation,  on  a  limited  production 
schedule  and  weigh  about  7  pounds. 

Although  the  unit  being  developed  under  this  contract  does  not  have 
voice  recording  capability,  discussions  with  equipment  suppliers  indicate 
that  the  technology  is  available  to  produce  a  similar  recorder  capable 
of  recording  both  voices  and  digital  data  on  aircraft  performance. 

In  addition  to  new  flight  recorder  standards  for  certain  aircraft 
operating  under  14  CFR  91  and  14  CFR  135,  the  Safety  Board  believes  that 
the  current  standards  for  aircraft  operating  under  14  CFR  121  should 
be  revised  and  updated  to  reflect  modem  needs  and  the  technological 
state  of  the  art.  Although  the  data  that  they  presently  provide  are 
extremely  valuable,  FDR's  could  record  additional  parameters  with  more 
useful  accuracy  and  CVR's  could  produce  better  quality  voice  recordings 
at  minimal  cost  if  modern  technology  were  employed.  A  list  of  requirements 
which  we  believe  to  be  feasible  is  attached.  (See  Attachment  2) 
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In  view  of  the  above,  the  National  Transportation  Safety  Board 
recommends  that  the  Federal  Aviation  Administration: 

Develop,  in  cooperation  with  industry,  flight 
recorder  standards  (FDR/CVR)  for  complex 
aircraft  which  are  predicated  upon  intended 
aircraft  usage.  (Class  II,  Priority  Action) 

(A- 78-27) 

Draft  specifications  and  fund  research  and 
development  for  a  low  cost  FDR,  CVR,  and 
composite  recorder  which  can  be  used  on  complex 
general  aviation  aircraft.  Establish  guidelines 
for  these  recorders,  such  as  maximum  cost, 
compatible  with  the  cost  of  the  airplane  on  which 
they  will  be  installed  and  with  the  use  for  which 
the  airplane  is  intended.  (Class  II,  Priority 
Action)  (A-78-28) 

In  the  interim,  amend  14  CFR  to  require  that  no 
operation  (except  for  maintenance  ferry  flights) 
may  be  conducted  with  turbine-powered  aircraft 
certificated  to  carry  six  passengers  or  more,  which 
require  two  pilots  by  their  certificate,  without 
an  operable  CVR  capable  of  retaining  at  least  10 
minutes  of  intracockpit  conversation  when  power  is 
interrupted.  Such  requirements  can  be  met  with 
available  equipment  to  facilitate  rapid  implementation 
of  this  requirement.  (Class  II,  Priority  Action) 
(A-78-29) 

KING,  Chairman,  McADAMS,  HOGUE,  and  DRIVER,  Members,  concurred 
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ATTACHMENT  1 


FATAL  ACCIDENTS 
I’.S.  GENERAL  AVIATION 
MULTI*  ENGINE  FIXED  WING 
1970-1977 

EXCLUDES  ACCIDENTS  WITH  NO  CAUSAL  ASSIGNMENT 
AS  OF  3/14/78 


BROAD 

Cau  sej F  a  c  tor 

Pilot 
Personnel 
A i rf  fame 
Landing  Gear 
F overplant 
Systems 
Instruments/ 

Equit-mert  &  Accessories 
Ai  rport/A.-:  rvays/Facilities 
Weather 
Terrain 
Mi scellaneous 
Undeterinired 


FATAL  ACCIDENTS 


Cause 

Factor 

Tcytal 

766 

169 

779 

76 

37 

111 

19 

3 

~- 

1 

1 

O 

4. 

110 

15 

120 

20 

6 

26 

3 

7 

10 

3 

10 

13 

37 

416 

442 

24 

160 

184 

22 

9 

31 

91 

0 

91 

Total  No. 

Fatal  Accidents  917 

FATAL  ACCIDENTS 
OF 

UNDETERMINED  CAUSE 
GENERAL  AVIATION 
MULTI-ENGINE  FIXED  WING 
1970-1977 


Category 

Number  of  Undetermined 
Accidents 

Number  of 
Fatalities 

Air  Taxi 

21 

80 

Corporate/Executive 

13 

47 

Business 

16 

37 

Pleasure/ 

28 

79 

Personal  Transport 

Miscellaneous 

13 

36 

(Ferry/ Inst rue t ion/Unknown) 

Total 

91 

279 
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ATTACHMENT  2 


FLIGHT  RECORDER  STANDARDS  VIEWED  AS  FEASIBLE 
BY  NATIONAL  TRANSPORTATION  SAFETY  BOARD 


COCKPIT  VOICE  RECORDER  to  record  intra-cockpit  voice  communications 

with  retention  of  at  least  10  and  preferrably  15  minutes  of  recorded 
data  at  time  of  power  interruption. 

Require  on  turbine-powered  aircraft  carrying  6  passengers  or  more, 
certificated  for  two-pilot  operation  that  are  in  present 
service  operating  under  14CFR91  or  14CFR135. 

MINI  FLIGHT  DATA  RECORDER  to  record  at  least  5  variable  parameters  and 
one  binary  signal  as  a  function  of  time.  The  minimum  parameters 
are:  Indicated  Airspeed,  Pressure  Altitude,  Magnetic  Heading, 
Vertical  Acceleration,  Longitudinal  Acceleration  and  the  keying 
of  any  air/ground  communication  equipment.  Recording  media  or 
memory  should  retain  the  last  10  minutes  of  data  at  time  of  power 
interruption. 

Require  on  newly  manufactured  multi-engine  aircraft  certificated 
to  carry  6  to  9  passengers  and  single-pilot  operation  under  14 
CFR91  or  14CFR135 . 

Require  on  newly  manufactured  multi-engine  aircraft  certificated 
to  carry  10  passengers  or  more  and  single-pilot  operation  under 
14CFR91. 

COMPOSITE  FLIGHT  DATA  and  COCKPIT  VOICE  RECORDER  or  individual 
installation  of  Cockpit  Voice  Recorder  and  Mini  Flight  Data 
Recorder  which  will  satisfy  the  requirements  for  both  equip¬ 
ment  as  described  above. 

Require  on  new.’y  manufactured  turbojet  aircraft  certificated 
to  carry  6  passengers  or  more  and  two  pilot  operation  under 
14CFR91  or  14CFR135. 

Require  on  all  multi-engine  aircraft,  including  those  presently 
in  service,  certificated  to  carry  10  passengers  or  more  and 
operating  under  14CFR121,  14CFR127,  or  14CFR135,  except  for  those 
larger  air  carrier  aircraft  required  to  have  recorders  by  the 
present  rule  14CFR121 . 343 . 
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BASIC  EXPANDED  PARAMETER  FLIGHT  DATA  RECORDER  as  described  in  14CFR 

121.343  paragraph  (a)(2),  and  COCKPIT  VOICE  RECORDER  as  described 
in  14CFR121 .359. 

Require  on  all  newly  manufactured  large  aircraft  certificated 
for  operations  above  25,000  feet  altitude  or  that  are  turbine 
engine  powered  regardless  of  the  date  of  issue  of  the  aircraft's 
type  certificate  that  operate  under  14CFR121. 

EXPANDED  PARAMETER  FLIGHT  DATA  RECORDER  recording  parameters  described 
in  Enclosure  1  to  Safety  Recommendations  A74-15  thru  17  dated 
March  1,  1974,  plus  any  dedicated  parameters  which  may  be  desirable 
because  of  unique  features  of  the  specific  aircraft  configuration 
and  type  design  ,  and  COCKPIT  V0IrE  RECORDER  as  described  in  14CFR 
121.359.  “  ~ 

Require  on  all  large  aircraft  certificated  for  operations  above 
25,000  feet  altitude  or  that  are  turbine  engine  powered  for 
which  a  new  type  certificate  is  issued  that  operate  under 
14CFR121 . 
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TABLE  II 


WORD  LENGTHS  USED  IN  MOST tjjn  Or L RAT  1 ONS 
ANb  EXAMPLES  Of  RLSUL'i'ING  KESOlUTTcTnS 


PARAMETER 

BITS  (N) 

EXAMPLE 

RANGE 

RESOLUTION 

FOR  N  BITS  AND 
EXAMPLE  RANGE 

RESOLUTION 
FOR  8  BITS  AND 

example  range 

Airspeed 

12 

0  -  400  KIAS 

0.1  KIAS 

1.6  KIAS 

Fine  Altitude 

12  1 

-1,000  to  50,000  ft 

1  foot 

200  feet* 

Coarse  Attitude 

7  or  12 J 

Magnetic  Heading 

10 

3600 

0.35  degrees 

1 .4  degrees  * 

Vertical  Acceleration 

10 

-3g  to  +6g 

O.Olg 

0.04g 

Longitudinal  Acceleration 

12 

-1  to  +lg 

0.0005g 

0.008g 

Pitch  Attitude 

10 

-75°  to  +750 

0.15  degrees 

0.6  degrees** 

Roll  Attitude 

10 

-180°  to  +180° 

0.35  degrees 

1 .4  degrees . 

Engine  Thrust 

12 

0-120  units 

0.03  units 

0.5  units 

Pitch  Control 

10 

-30°  to  +30° 

0.06  degrees 

0.24  degrees 

Lateral  Control 

10 

-30°  to  +30° 

0.06  degrees 

0.24  degrees 

Yaw  Control 

10 

-30°  to  +30° 

0.06  degrees 

0.24  degrees 

Trailing  Edge  Flap 

10 

0  -  60° 

0.06  degrees 

0.24  degrees 

Air  Temperature 

12 

-100  to  +50°C 

0.04OC 

0.6OC 

Pitch  Trim 

12 

-300  to  +30° 

0.015° 

0.24  degrees 

Lateral  Acceleration 

10 

-1  to  +lg 

0.002g 

0.008g 

Angle  of  Attack 

10 

-20°  to  +400 

0.06  degrees 

0.24  degrees 

*  Not  acceptable. 

**  A  pitch  range  of  -50°  to  +25°  gives  a  resolution  of  0.3°  using  8  bits. 
We  consider  0.30  acceptable. 
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NORM ALA1R- GARRETT  LIMITED 

ELECTRONICS  DIVISION  -  YEOVIL 


Clarence  Street, 

Yeovil,  Somerset  BA20  1  YC.  England 
Telephone  Yeovil  (Code  0935)  26151 
Telex  46527 

Telegrams  NGL  Telex  Yeovil 


Crash  Survivable  Flight  Data  Recorder  Study  -  Questionnaire  -  Sheet  1 

Kormalair-Garrett  Ltd  and  the  Airesearch  Manufacturing  Company  of  Cali¬ 
fornia  are  jointly  carrying  out  a  study,  under  contract  to  the  United 
States  Air  Force  Systems  Command  -  Wright  Patterson  Air  Force  Base,  to 
determine  the  optimum  crash  survivable  flight  data  recording  system  for 
military  aircraft. 

Or.e  aspect  of  the  study  is  to  collect  and  evaluate  a  wide  range  of  infor¬ 
mation  covering  accident  investigation  requirements;  maintenance  recor- 
cing;  availability  of  signals;  data  compression;  cost,  size,  weight, 
reliability /maintainability  of  recording  equipment,  and  typical  mission 
pro  files. 


Tilt  A-10,  F-15  and  F-16  are  to  be  considered  typical  aircraft  for  the  pur¬ 
pose  of  the  study.  However  we  are  also  required  to  determine  whether  it 
is  feasible  to  produce  a  standard  system  suitable  for  both  fighter /trainer 
and  transport /bomber  aircraft. 

We  would  be  very  grateful  if  you  would  provide  us  with  as  much  of  the  infor¬ 
mation  indicated  on  the  attached  sheets  as  possible.  If  there  is  other 
information  that  you  consider  relevant  to  the  study  please  provide  that 
also. 


Please  reply  to  the  above  address  and  if  you  have  any  queries  telephone 
Nick  Bullock  (Project  Engineer)  on  0935  26151  Ext  ?3l . 
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NORMALAIR- GARRETT  LIMITED 

ELECTRONICS  DIVISION  -  YEOVIL 


Clarence  Street. 

Yeovil.  Somener  8A20  1  YC.  England 
Telephone  Yeovil  I Cod e  09351  26151 
Tele*  4652 7 

Telegrams  NCL  Tele*  Yeovil 
your  tel 

dote 


Crash  Survivable  Flight  Data  Recorder  Study  -  Questionnaire  -  Sheet  2 


Details  of  person(s)  and  organisation  responding: 

Sane  .  J.tfiLSr.wfcfce.$y.... 

haae  .  Job  Title  . JJ . 

.'iaae  .  Job  Title  . 

Organisation  . .  .$  T.lS .  U  CT.  U&K  S . i2  A  E. . 

Address  . .  . .  /[T.&YVs-J X  T.'i  >.  . 


Telephone  . .  Tr'j’.l  C  (  *  £ ^b  (TV  £!  d~£> 

Cenerai  Remarks  isl&ojbodsfvvis  CA'A  8k  ^AF  <fv-" 

CL  tLA^JT  AS) 

CLn^  'V%AJA4$jLj  aJk-td'  fO  •A'vtl*  f+v"\uUL' 

«WtAw~C*  A<v^c<Vvs4^C-k/' 

jUjulka  ‘U.  Ci+^aijLuajis*  fiS  $-*•  ^W€^ffV7L*W-  y!L 

dj^ytAA^  4,  Q  C\  'yyrsAZMZu^1 

ref.  :;J03/E5>F/h37  Issue  x 
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Mil 


Crash  Survival  Flight  Data  Keccraer  Study  -  Cuesticnnaire  -  Sheet 
Accident  Investigation  Questions  -  I 
1.  Parameters 


Sheet  14  and  5  list  various  parameters.  Please  add  any  others  that 
you  regard  as  important  and  indicate  the  order  of  priority,  the  re¬ 
quired  sampling  rate,  the  total  signal  range  and  the  required  accuracy 
and  resolution  plus  any  remarks.  Under  Resolution-Fine  please  give 
the  resolution  that  would  be  needed  in  an  accident  investigation  situ¬ 
ation  and  under  Resolution-Course  that  which  would  be  acceptable  und“r 
steady  state  conditions.,  „ 


steady  state  conditions.,  /  fj 

S. 

2.1  Minimum  recording  duration  . . liqurs/*  . . . .. .  flights. 

2.2  Please  indicate  how  probability  of  determining  caus^of  accident 
would  be  affected  if  recording  duration  was: 

last  10  minutes  . . .  last  20  minutes 

*4  C0vd<J**'dL  Aw.  « ioCL 

last  30  minutes  . r,  one  complete  flight  ... 

3.3  How  would  the  figures  in  paras  2.1  and  2.2  be  altered  if  maintenance 
data  w£re  available  in  addition  to  crash  parameters. 

.rSulvVT. 


3.  Survival 


5.1  What  crash  protection  levels  are  necessary  for  high  performance 
military  aircraft. 


XS.0....C5JA 


;r /surv 

i>>i  What  is  the  optimum  lc 

Acpwx. 

3-1*  If  «  eoectaKle1  record 


3.2  What  recorder^survival  rate  would  those  levels  provide  ..  «%... 
'••2  What  is  the  optimum  location  for  the  9ec®rder( 


‘A. 


recorder  is  us#d  what  protection  levels^are  required 
and  what  would  survival  rate  be.  . 

r<nV 

3-5  What  proportion  of  crash  into  water  of  a  depth  that  prevents 

recovery  4 


u.  General 


po^t^or^  ofy^iry:  ryf^c  \ 

■  o~.  rn*uJUff  .-utifofvrT 

ral  *  * 


j.  in  wna;  proportion  01  acciaeai 
/>f*  determining  the  causeS.  2J 

y4*WMVtAH  CAH+jliT 

*v.  ft*. Srh^Apt*.* 

Ref.  VZ  v* 


,'y*jLA4M* r+9. 
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Crash  Survival  Flight  Pats  Recorder  Stujv  -  Questionnaire  -  Sr.ee*-  - 
Accident  Investigation  Questions  -  I  cont 

b.C  In  what  proportion  of  accidents  vc^id  t he  addition  of  audio  b tin 
to  a  determination  of  the  cause,  sty, 

. .*Yv  . 

U .  •  If  audio  is  included  should  it  be  pilot's  tels.,  pilot  's 

mic,  free  area  mj,c^etc.  and  via  should  duration  oe.  yAjsbJ *** ^ 
©v^ufji  ,f.  I4J0  C/r&s}  "WiA *-» 

I; . U  Ir.  what  proportion  of  accidents  does  determination  of  the  cause  4*~f*'* 
prevent  a  repetition. 


r.r.  44  .  «»  «*<  r  .  y  k  .  jjArr.  nor.vr.  .  r.  . .  r.  .  .w r.  /■ . 

^  aJ^A/yh.  fa  Jh LyC  AmM* 


AJLssML  CAMS* jj  . 


Ref.  ;;.T0B  'ER3/I-U?  Issue  1 
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inaire  -  She* 


bi-  Flight  Data  Recorder  £ 


Acciaent  Investigation 


Paraaete 


Priority 


Angie  of  attack 
Altitude  (pressure) 
(radio) 

Normal  acceleration 
( Loadfactor ) 

Poll  rate  tutC, 
Calibrated  airspeed 
1'av  rate  ft'OC  C 
Pitch  rate  f^asU. 
Elevator  position 
Aileron  position 
Rudder  position 
Roll  (bank)  angle 
Fitch  attitude 
Vertical  velocity 
Heading  (magnetic) 

( gyro ) 

Engine  r.p.m 
Engine  EOT 
Engine  fuel  flow 
Hydraulic  pressure 
Utility  hydraulic 
pressure 
Generator  output 
Invertor  output 
Oil  pressure 
Fuel  quantity 
DME  ('Distance' 
Measuring  Equip) 
Oxygen  pressure 
Ejector  seat  operation 
Airframe  stresses 


Epe 


?-/6  | \-Wty\byj4U 
S-U  \30+JU«x 


JLi 


UGH/BRi/V 


r-L» 


Crash  Survival  Flight  Hata  Recorder  Study  -  yuestionr.aire  -  Sheet  ( 


Accident  Investigation  Questions  -  III 


Parameter 

Priority 

IS 

•Signal 

Ranee 

Accuracy 

Resolution 

Remarks 

Side  slip  ar.£le 
Throttle  position 
Afterburner  -  range, 
-nozzle  position 
Rudder  pedal  - 
position  or  force 
Stick-position  or 
force 

Mach  number 

Flap  position 

Sanding  gear  position 
Speed  brake  position 
Oil  Quantity 

Air  Data  Computer 
Status 

Fire  Control  System 
Status 

Press  to  transmit 
Lateral  acceleration 
Reverse 

Leading  edge  high 
lift  devices  - 
control  position 
Pitch  trim 
Temperature  type? 
Undercarriage 

ILS  Localiser 

ILS  Slideslope 
Warnings 

Fire  (each  engine 
and  APU) 

Cabin  pressure 
Warning  leading  to 
engine  shutdown 
Fuselage  smoke 
Essential  Pneu¬ 
matic  Power 
Autopilot 

Engagement  of  each 
control  axis 
Selection  of  each 
'Capture*  &  'Ac¬ 
quire'  mode 

Others 

T 

z 

/ 

z 

3 

7 

3 

2. 

3 

I 

i 

c/fcut*tAi 

Ref.  I.’JCE/BrB/d  r*  Issue  1 
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Crasr.  Survlvable  Flight  Data  recorder  Study  -  Questionnaire  ~  Sheet  7 


Airframe  Information  -  I 


Please  supply  as  much  of  the  following  information  as  possible  for  each 
aircraft  under  consideration.  Use  whatever  format  is  most  convenient  to 
you. 


1.  Aircraft  type. 

2.  Maximum  acceptable  size,  mass,  and  power  consumption  of  the  acquisition 
system  ar.d  the  memory  unit. 

3-  Optimum  location  of  memory  unit  for  crash  survival. 

1 .  Possible  positions  for  memory  unit  and  acquisition  system. 

5-  Environmental  conditions  obtaining  at  locations  in  para  k. 

6.  Crash  conditions  i.s.  shock  levels,  impact  and  crush  forces,  fire 
temperature  and  duration. 

7.  Signal  availability. 

The  following  data  is  sought  for  each  of  the  parameters  listed  on 
Sheet  9  and  any  other  parameters  you  regard  as  desirable  for  accident 
investigation  purposes. 

7.1  Signal  range  and  type. 

7.2  Max  rate  of  change. 

7.3  Accuracy. 

7.«  Repeatability. 

".5  resolution. 

7 .£  Reliability. 

7.7  Maintainability . 

7.S  Any  other  data  considered  relevant. 

7-9  If  the  signals  are  not  available  on  digital  data  highway  where 
can  they  be  obtained  -  info  wanted  for  cabling  considerations. 

7.10  If  no  signal  is  available  what  are  the  problems  involved  in  fitting 
a  transducer  and  what  would  the  weight  penalty  be. 

7.11  Alternatively  can  the  information  be  deduced  from  other  parameters  - 
please  indicate  the  cases  in  which  this  would  be  a  better  solution 
than  fitting  a  transducer. 

~.12  Normal  signal  profile. 


Ref.  :.J0S/SRB ''l07  Issue  - 
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Airframe  Information  -  X  cont 

7.13  Interelationship  between  signals  in  normal  flight  (this  is  for 


8.1  What  parameters  should  be  recorded  for  maintenance  purposes. 

8.1  Please  provide  the  information  indicated  in  para  7  for  the  mainte¬ 
nance  data  signals. 


fief.  i;JOB/BKB/l*97  Issue  1 
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Crash  Survivatle  Flight  Data  Recorder  Study  -  Questionnaire  -  Sheet  9 


Parameters 


Angle  of  attack 
Altitude  (pressure) 
(radio) 

Normal  acceleration 
(Load  factor) 

Boll  rate 

Calibrated  airspeed 
lav  rate 
Pitch  rate 
Elevator  position 
Aileron  position 
P.uader  position 
Boll  (bank)  angle 
Pitch  attitude 
Vertical  velocity 
Beading  (magnetic) 

( gyro ) 

Engine  r.p.m 
Engine  EGT 
Engine  fuel  flow 
Hydraulic  pressure 
Utility  hydraulic 
pressure 

Generator  output 
Inverter  output 
Oil  pressure 
Fuel  quantity 
DIE  (  Distance  Measuring 
Equipment ) 

Oxygen  pressure 
Ejector  seat  operation 
Airframe  stresses 
Side  slip  angle 
Throttle  position 
Afterburner  -  range 
nozzle  position 


Rudder  pedal  position 
or  force 

Stick  position  or  force 
Mach  number 
Flap  position 
Landing  gear  position 
Speed  brake  position 
Oil  quantity 
Air  Data  Computer 
Status 

Fire  Control  System 
Status 

Press  to  transmit 
Lateral  acceleration 
Reverse 

Leading  edge  high  lift 
devices  -  control  pesi- 
ti  on 

Pitch  trim 
Temperature  type? 
Undercarriage 
ILS  Localisor 
ILS  Glideslope 
Warnings 

Fire  (each  engine  l  AP'J) 
Cabin  pressure 
Warnings  leading  to  engine 
shut  oovn 
Fiiselage  smoke 
Essential  Pneumatic  Power 
Autopilot 

Engagement  of  each  control 
axis 

Selection  of  each  'Capture' 
&  'Acquire'  mode 


Ref.  I»J0B/BRB/^9?  Issue  1 
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Crash  Survivable  Flight  Data  Recorder  Study  ~  Questionnaire  -  Sheet  10 

Operational  Questions  ~  I 

Please  respond  in  vhatever  format  is  most  convenient  to  you. 

1.  What  is  the  maximum  acceptable  size,  mass  and  pover  consumption  for 
the  accident  recorder  and  the  acquisition  unit. 

2.  If  maintenance  recording  is  undertaken  what  is  the  optimum  means  of 
retrieving  the  data  e.g.  removing  accident  recorder  memory  from  air¬ 
craft,  •milking*  recorder  on  the  aircraft,  a  separate  quick  access 
recorder. 

3.  If  milking  is  undertaken  what  is  maximum  acceptable  ’miking’  time. 

- .  Hov  quickly  is  maintenance  data  analysis  required. 

5.  What  parameters  should  be  recorded  for  maintenance  purposes. 

6.  What  recording  duration  is  required. 

7.  What  is  a  typical  mission  profile. 

5.  Is  there  a  definable  relationship  between  certain  parameters  during 
normal  flight. 

9.  What  are  the  best  positions  for  fitting  the  acquisition  -unit  and 
recorder(s) . 

10.  What  reliability  is  required  from  an  accident  recording  system  and  a 
maintenance  recording  system. 

11.  What  maintainability  is  required. 

12.  What  savings  car.  be  achieved  by  employing  a  maintenance  recording 
system. 

13.  What  are  the  implications  of  using  the  same  equipment  on  fighter /trainer 
aircraft  and  transport /bomber  aircraft. 

Ik.  How  dc  the  responses  to  the  above  question  differ  for  transport /bomber 
aircraft. 


Her.  :;j03/cF3./u>7  Issue  1 
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Crash  Parameters  Sampling  Rates  and  Accuracy 

The  parameters,  sampling  rates,  and  accuracies  shown  on  the  attached 
tables  apply  to  a  typical  hi gh-performance  military  aircraft.  Since  the  tables 
were  produced,  certain  low  sample  rate  engine  parameters  have  been  added;  these 
are  chiefly  temperatures. 

The  actual  aircraft  type  to  which  the  figures  relate  cannot  be  divulged 
because  the  information  is  restricted. 
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LIST  OF  EVENTS 


mple  R  ate 

1 
I 
l 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 


Bits 

1 

1 

1 

1 

1 

1 

1 

1 

I 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 


Event 

Engine  Vibration  Port  (red) 

Engine  Vibration  Starboard  (red) 
Ice  Warning 

Hydraulic  Pressure  Port 

Hydraulic  Pressure  Starboard 

Cabin  Pressure 

Fuel  Content  Low  Warning 

Fire  Warning  Port 

Fire  Warning  Starboard 

Pitch  SAS-AD  2nd  Failure 

Roll  SAS-Au  2nd  Failure 

Yaw  SAS-AD  2nd  Failure 

Pitch-Roll  for  Emergency  Control 

Taileron  f.  2nd  Failure 

Rudder  f.  2nd  Failure 

Flag  Warning  Sigs.  Glide  Slope 

Flag  Warning  Sigs.  Localizer 

Flaps  Slat  Actuation 

Oleo  Switch  Operation 


CSAS 


CSAS 
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Section  C,  Addendum  f  1 


F33615-80-C-0117 
Page  7a 


FLIGHT  DATA  RECORDER  PARAMETER  LIST 


The  following  parameters,  taken  from  the  Statement  of  Need  (SON)  for  Flight 

Data  Recorders,  dated  27  August  1979,  must  be  considered  as  a  baseline  for  the  Plight 

Parameter  Evaluation. 

Angle-of-attack 

Altitude 

Normal  load  factor 
Roll  rate 

Calibrated  airspeed 
Yaw  rate 
Pitch  rate 
Elevator  position 
•Aileron  position 
Rudder  position 
Bank  angle 
Pitch  attitude 

Sink  rate  (vertical  velocity) 

Heading 

Engine  RPM 

Engine  EGT 

Engine  fuel  flow 

Hydraulic  pressure 

Utility  hydraulic  pressure 

Generator  output 

Inverter  output 

Oil  pressure 

Fuel  quantity 

Given  storage  capacity,  the  following  parameters  are  highly  desirable  for 

inclusion: 

Sideslip  angle 
Throttle  position 

Afterburner  (range,  nozzle  position) 

Rudder  pedal  (position  or  force) 

Stick  (position  or  force) 

Mach  number 
Flap  position 
Landing  gear  position 
Speed  brake  position 
Oil  quantity 

Air  Data  Computer  Status 
Fire  Control  System  Status 
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SECTION  D  -  Preservation/Packaging/Packing 


(1)  The  contractor  shall  provide  preservation,  packaging  and  packing 
which  shall  afford  adequate  protection  against  physical  damage 
during  shipment  for  all  deliverable  items  In  accordance  with 
Level  C  of  MIL-STU-794. 
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PARAMETERS  UTILITY  (H,  M,  L)/AVAILABILITY  (AVAILABLE,  N/A) 


TIME  1  S'  ' 

STICK  POS 

FUEL  FLOW  7V7C 

AOA  <if% 

RUDDER  RED  POS 

.OIL  PRESS. 

ALT  (BARO)  ^3%  - 

ELEV.  POS.  97  7o 

A/B  POS.  * 

CAS  9  7%> 

AILERON  POS.  S'f/V 

OAT 

MACH  If  % 

RUDDER  POS.  L,$70 

ALT  (RDR)  [$90 

PITCH  ATT  (.tVo 

THROTTLE  POS  ; 

L 1% 

HYD  PRESS 

BANK  ATT  t'  $  to 

N,  3  7o 

UTIL  HYD  PRES  If 

HEADING  IS70 

N2  *f  7 

GEN  XH?C 

YAH  RATE  *7  1  7c 

EGT  9  7 

JNVERTER  It  ?0 

NORM  LOAD  H7?o 

CDP  6*^1? 

TRIM  *97  ?0 

FUEL  TOT  <>7o 

CAOC  " 

MASTER  CAUT  ±1% 

FUEL/TANK  L  % 

CAS  PITCH 

FIRELITc 

GEAR  POS 

ROLL  97?o 

EPU  (APU)  IT-  % 

FLAP  POS  1  H  70 

YAH  3<f% 

STARTER  (,  *7o 

SB  POS  % 

SLAT  POS  <f  *  70 

COW  TRANSMIT  \%% 

PADDLE  SWITCH  1 

ANTI  SKID  FAIL 

NAY  STATUS 

8  7o 

l7q 
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CRASH  DATA 


[ 
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PILOT  SURVIVED  (t  a 


ACCIDENT  NO. _  A/C  TYPE  F~/b 

CATEGORY  ACCIDENT _ 

CAUSAL  FACTORS/CERTAINTY  f  -5  tle.  . 

1  -  5 


2  6 

3  7 


4 


8 


PARAMETERS  UTILITY  (H.  M,  UNAVAILABILITY  (AVAILABLE,  N/A) 


TIME 

STICK  POS  Vt  % 

AOA  3  ~t9<) 

RUDDER  RED  POS  3/ ft 

ALT  (SARO) 

ELEV.  POS.  5V 

CAS  7  7  9o 

AILERON  POS.  3*7* 

MACH  9  % 

RUDDER  POS.  ~b  i% 

PITCH  ATT  3«  90 

THROTTLE  POS  V  % 

BANK  AH  3  /  ?c 

N,  U  7  % 

HEADING 

n2  3  s 

YAW  RATE 

EGT  3  / 

NORM  LOAD  3  1  % 

COP 

FUEL  TOT  A  3  7* 

CADC 

FUEL/TANK  3.  3  % 

CAS  PITCH 

GEAR  POS 

ROLL  *  3  70 

FLAP  POS 

YAW  1  ?  70 

SB  POS 

PADDLE  SWITCH 

SLAT  POS 

ANTI  SKID  FAIL 

COW  TRANSMIT 

NAV  STATUS 

AIRESEARCH 
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FUEL  FLOW  WtVl 
OIL  PRESS.  ?'7e 
A/B  POS.  2  ’ 

OAT  /^TSfc 
ALT  (RDR)  ?  ^ 
HYD  PRESS  •>'4  ?<■ 
UTIL  HYD  PRES  'S 
GEN  ?  ”0 
•INVERTER 
TRIM 

MASTER  CAUT  • 
FIRELITE  3'^ 
EPU  (APU)  S’  z7* 
STARTER 

pr/r 
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WRECKAGE 

COCKPIT 


AVIONICS  BAY 


EOECT  SEAT 


CANOPY  RAIL 


L  WING  TIP 


R  WING  TIP 


VERT  TAIL 


TAIL  CONE 


|K  %  ib%  |  S%\  7/  %  |  3,  % 


3/  % 


Tt%\  fb% 


T>»'M  W7c 


\*%\ 


*% 


*"•  \iVt  qi.7c 
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ACCIDENT  NO. _ 

CATEGORY  ACCIDENT _ 

CAUSAL  FACTORS/CERTAINTY 
1 


A/C  TYPE  f-lL  PILOT  SURVIVED. 
-  b 


5 


2 

3 


S 

7 


4 


8 


PARAMETERS  UTILITY  (H,  M.  UNAVAILABILITY  (AVAILABLE,  N/A) 


TIME 

STICK  POS 

AOA 

RUDDER  RED  POS 

ALT  (BARO)  lc7c 

ELEV.  POS. 

CAS  */c  7e 

AILERON  POS. 

MACH  IcVo 

RUDDER  POS. 

PITCH  ATT  dO 7c 

THROTTLE  POS  00  7o 

BANK  ATT  J-0  7o 

? 

N1  00  7o 

HEADING  7C% 

n2  $ o  7t> 

YAW  RATE  to  7c 

EGT  0  0  7o 

NORM  LOAD  to  *7o 

CDP  0-0  7 o 

FUEL  TOT  00  7 o 

CADC 

FUEL/TANK  'IOVo 

CAS  PITCH  - 

GEAR  POS 

ROLL  'tO  %> 

FLAP  POS 

yaw  ?<>  y° 

SB  POS 

PADDLE  SWITCH 

SLAT  POS 

ANTI  SKID  FAIL 

COW  TRANSMIT 

NAV  STATUS 
fie  II  tat* 

0,'fcX  Rat* 

lfiC% 


FUEL  FLOW  SO?o 
OIL  PRESS.  >o9o 
A/3  POS. 

OAT 

ALT  (RDR) 
riYD  PRESS 
UTIL  HYD  PRES 
GEN 

INVERTER 

TRIM 

MASTER  CAUT 
FIRELITE  7»7c 
EPU  (APU) 

STARTER 

Side  S/Ip  >0'7q 
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CRASH  DATA 


EJECTION  INITIATED  ^  W  ^  PITCH  ATTITUDE 
WRECKAGE  RECOVERED  7-**  /<50  %  BANK  AniTUDE 
CANOPY/SEAT* RECOVERED  -***■  /oC %  IMPACT  ANGLE 


IAS 

KACH 

VVI 

FUEL  QUAN. 
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(T> 


Minimum  F/A-18  Parameters  to  be  Sampled  by 
Flight  Incident  Recorder 

A)  Elapsed  Time 

B)  EGT/TIT  (Left  and  Right  Engine) 

C)  Fuel  Flow  (Left  and  Right  Main  Fuel  now) 

D)  RPM  (Left  and  Right  NL) 

E)  RPM  (Left  and  Right  1!H) 

F)  Vertical  Acceleration  (4  Samples  per  second) 

G)  Pitch  Trim  (FCECA  or  FCEC3  Takeoff  Trim  set) 

H)  Pitch  Attitude  (Position  and  Rate) 

I)  Barometric  Altitude 

J)  Radar  Altitude 

K)  Airspeed  (True,  Indicated,  Mach  No.) 

L)  Roll  Attitude  (Position  and  Rate) 

I!)  Elevator  Position  (Left  and  Right  Stab.  Position) 

N)  Cabin  Pressure  Warning 

O)  Generator  Warning  (Left  and  Right  Generator  Out) 

P)  Flap  Position 

Q)  Oil  Quantity  Lou  Warning 

R)  Fire  Warning  (Left  and  Right) 

S)  Hydraulic  Pressure  Lou  War- Lng  (All  Hyd  References) 

T)  Auto  Flight  Control  System  (on/off)  ■ 

U)  Power  Lever  Angle  Position  (Left  and  Right  Engine) 

V)  Aileron  Position 

W)  Magnetic  Heading 

X)  Rudder  Position 

Y)  Angle  of  Attack 

Z)  Cabin  Air  Temp. 

/.A)  Ambient  Temp  (OAT) 

S3)  Nozcie  Position  („ef:  and  Right  Engine) 


lit. 
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intpolucticn 

1.1  The  Air  Niivi pat i on  Order  ll<7 an  arer.ricri,  requires  that  certain 
categories  of  aeropl mec  be  enuip:eri  with  a  flirht  recorriinr  system 
(comprising  a  flirht  data  recorder  system,  and  a  cockpit  voice 
recorder  systen )  approved  for  the  rurpose  by  the  Civil  aviation  Authority. 

1.?  flirht  data  recorder  systems  installed  in  aeroplanes  in  compliance 
with  the  Order  shall  coir.r.ly  with  this  Gdcc!  ficr-tion  or  with  such 
other  opec:  ficatior.  as  the  Civil  Aviation  /authority  may  aorrove. 
Altern-.tive  ir.ml.  tionc  submitted  for  arnroval  shall  have  at 
least  an  equivalent  st.mc  rd  of  performance  and  snail  comply  with 
the  particular  requirements  of  the  Order. 

1.3  Cockpit  Voice  recorder  Systems  will  be  subject  to  compliance 
with  Civil  Aviation  Autnority  (Airwortniness  Division)  Specification 
No.  11. 

API LlCAol LITY  This  Specification  prescribes  the  minimum  performance 
standard-.,  the  installation  requirements  and  requirements  1  or  rer.eral 
accident  investi  *»ti  or.:,  and  maintenance  applicable  to  flight  riata 
recorder  system  arc  components  installed  in  conventional  rub-sonic 
aeroplanes  in  acre  raar.ee  w.ih  t.v  i.rcvinor.r  of  the  Air  Navigation  Order 
197 as  ai.  endec ,  Grneriule  5.  Paragraph  *♦  (b) ,  Genie  S. 

sysTL?-;  tg 

3*1  Def- ni t i on.  > or  the  purpose  of  this  Specification  the 

to  be  approver;  -  r;al  '  b<  that  which  l  r  necessary  to  a  flight 
recoraer  system  carar-1  e  of  recornin-  by  reference  to  a  time 
data  from  whicn  the  information  required  in  ADO  Schedule  5» 

Paragraph  A  (t>),  Sea  ie  S  can  be  established. 

The  flirht  data  recorder  syst< m  will  normally  include  the 
follov.mr  items  cf  equi fmont : - 

(a)  One  or  rore  units  necessary  for  data  renui  ration  and  nrocessing. 

(b)  A  control  panel  on  which  system  status  is  disdayed. 

(c)  A  crash  rrotected  recorder. 

(ci)  ».  here  i  r.ior' ation  ir.  not  already  available  from  existing 
sources  transducers  to  provide  a  source  of  riata. 

3-P  General  P.j-ht  bnt  Recorder  System  Heoui resents ■  The  primary 
purpose  of  the  flight  data  recorder  system  is  the  achievement  of  the 
three  particular  objectives  of  paragraphs  3-?. 1(a)  to  (c).  The 
fourth  objective  of  (d)  is  a  general  one  and  it  can  only  be 

achieved  to  a  degree  cons. stent  with  the  number  of  parameters  recorded. 
Where  the  recorded  data  is  the  same  .is  that  which  is  also  presented 
to  the  pilots  but  is  obtained  from  a  different  source,  calibrations 
shall  be  available  such  that  the  information  presented  to  the  pilots 
in  normal  flight  conditions  can  be  deduced. 


ecuipment 
riata 
scale , 
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?.]  Ob.iecti  V'  r. .  The  objective  in  the  selection  of  parameters 
is  that  the  following  information,  required  for  accident 
investigation  purposes  shall  be  obtainable  either  directly  or  by 
deduction  from  the  system: - 

(a)  the  flirht  rath  of  the  aeroplane, 

(b)  the  attitude  of  the  aeroplane  in  achieving  that  flight  path, 

(c)  the  basic  forces  act: ng  upon  the  aeroplane  and  resulting 
in  the  achieved  flight  path  (e.g.  lift;  drag;  thrust; 
control  forces) ,  and 

(d)  the  general  origin  of  the  basic  forces  and  influences 
(e.g.  navigational  information;  aeroplane  system  status 
information) . 

? .?  Parameters  to  be  Recorded.  The  recording  reouirements  for 
conventional  sub-sonic  aeroplanes  shall,  in  relation  to  the  list 
in  Table  1  be  as  follows: - 

(a)  Aeroplane:  havinr  a  total  maximum  -  either  a  voice  recorder 

weight  authorised  of  between  or_  parameters  1  to  9 

9700  kg  and  11399  kg.  inclusive. 

(b)  Aeroplane.' ,  having  a  total  maximum  -  A  voice  recorder  and 

weight  auf.orir.ca  of  between  parameters  1  to  10 

1140C  kg  ana  Pt_999  kg  inclusive. 

(c)  Aeroplar.es  saving  a  total  maximum  -  A  voice  recorder  and 

weight  authorised  of  27000  kg  and  parameters  1  to  ?6 

over.  inclusive. 

NOTriS:  (l)  It  is  not  intended  that  the  parameter  lists 

resulting  1 rcr  the  application  of  the  reouirements 
of  J/.P.r  should,  in  any  installation,  recuire  more 
recorder  capacity  than  is  provided  by  a  64  words 
per  second  system. 

(2)  The  t-arameter  recui rer ents  for  non-cor.venti  onal 
sub-sonic  and  for  supersonic  aero;  lanes,  will  be 
the  subject  of  consultation  between  the  manufacturers, 
intending  operators  and  the  Civil  Aviation  Authority. 

Accuracy 

.3.1  Lone-term  Accuracy .  The  required  parameter  accuracy  is  cuoted 
in  Table  1  and  is,  ir.  each  case,  the  RSS  (root  sum  squared)  value, 
measured  between  the  absolute  value  of  the  parameter  (unless 
otherwise  stated)  and  the  final  numerical  presentation  after  read-out 
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1 


3»3»2  Repeatnbi  11  tv .  For  any  parameter  within  the  range  of  Table  1 
the  flight  data  recorder  system  (as  defined  in  3-l)  should  have 
a  repeatability  over  a  period  of  one  minute  in  normal  flight 
conditions  at  least  five  times  better  than  the  parameter  accuracy 
quoted  in  Table  1. 

3. *4  Resolution.  The  resolution  of  the  flight  data  recorder  system 
over  its  operating  range  shall  not  be  less  than  the  short  term 
repeatability  specified  in  3.3*2. 

Relative  Timinrs.  Readings  shall  be  recorded  such  that  relative 
imings  of  different  parameters  can  be  deduced  to  within  0*25  seconds. 

3-6  Reliability 

3.6.1  The  flight  data  recorder  system  shall  be  designed  with  the 
objective  of  attaining  a  mean  time  between  failures  consistent 
with  the  requirements  of  6,  and  the  • anufacturer(s)  shall  recommend 
in  the  Faintenance  F.anual  the  read-out  periods,  calibration  procedures 
and  overhaul  periods  necessary  to  comply  with  and  maintain  these 
standards  in  service. 

3.6.?  In  order  to  achieve  compliance  with  3.6.1,  the  design  objective 
for  tne  digital  data  processing  unit  and  the  recorder  shall  be 
that  not  more  than  one  word  in  10*4  will  be  nis-read  under  the 
environmental  ano  operating  conditions  to  which  the  quipment  may 
be  subjected  in  service.  As  the  loss  of  data  synchronism  will  in 
the  worst  care  result  in  the  loss  of  all  data  for  at  least  one 
complete  data  word  frame,  the  probability  of  its  occurrences  shall 
be  not  greater  t.nar,  one  word  frame  in  10'  word  frames.  If  parity 
check  is  sroviaed  1 nen  10  words  mown  to  be  spurious  by  such  a 
parity  cnecr.  may  be  debited  as  one  r  is  -read  word.  As  certain 
digital  words  may  prese: t  greater  rrobloms  in  data  reconstruction 
this  standard  shall  be  .ttained  at  all  points  in  the  flight  data 
recorder  scale. 

3.7  Lata  Fonitor 


3.7.1  The  flight  data  recorder  system  shall  include  a  reans  of 
monitoring  that  valid  data  is  being  recorded,  and  shall  rrcser.t 
this  information  on  the  system  control  panel  which  shall  be 
accessible  to  tne  flight  crew  for  the  t<ref  light  check. 

3.7.2  An  analysis  of  the  monitor  to  show  compliance  with  3.7*1 
shall  be  provided  by  the  manufacturer. 

3.8  Crash  Protected  Recorder 

3.8.1  Record  Luration.  The  record  duration  shall  be  at  least 
25  hours. 
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3.8.?  I der.ti  f  i  cat :  cr, .  The  crash  protected  recorder  shall  be 

provided  with  reanr.  to  facilitate  its  icentification  ir.  conditions 
following  a  crasn  including  fire.  This  may  be  achieved  by 
the  recorder  being  coloured  fluorescent  orange  or  international 
orange  and  carrying  the  following  warning  in  relief  in  black 
letters  at  least  one  inch  high:- 

Flight  recorder  -  do  not  ooen 

Enregistreur  de  vol  -  ne  pas  ouvrir 

NOTl:  Where  this  method  is  not  appropriate  alternative  means 

should  be  discussed  with  the  Civil  Aviation  authority. 

3.f.3  Crash  Protection  Requirements 

(a)  The  warning  required  by  3 •  shall  remain  legible  and  the 
record  shall  be  capable  of  analysis  by  normal  playback 
technicues  after  a  flight  recorder(s)  has  been  subjected 
to  the  following  sequence  of  tests: - 

(i)  Impact,  penetration,  crush,  fire  and  fluids,  excepting 
sea  water. 

(ii)  Impact,  penetration,  crush  and  sea  water. 

(b)  At  the  start  of  the  fire  tests  the  recorder  shall  be  at  its 
normal  nv-.xirum  internal  working  temperat  ure ,  and  shall  be 
allowed  to  cool  naturally  after  the  test. 

(c)  Test  Frpcob  .res 


(i)  I  moor t.  The  recorder  shall  be  subjected  to  half  sine 
wave  rrnact  shocks  applied  to  each  of  the  three  axes 
in  the  cost  critical  direction,  and  having  a  peak 
acceleration  of  1,000  'g'  for  rt  least  5  milliseconds. 

(ii)  Penetration  rieri  stT.cc .  The  recorder  shall  be 
subjected  to  an  in. pact  force  rroduccd  by  a  ??£>  kg 

( 300  lb)  steel  bar  which  is  dropped  from,  a  height  of 
3m  (  10  ft)  on  to  the  weakest  face  of  the  recorder  in 
the  most  critical  plane.  The  point  of  contact  of  the 
bar  shall  have  an  area  no  greater  than  3 2r,m^  (0*05  in^). 
The  longitudinal  axis  of  the  bar  shall  be  vertical  at 
the  time  of  impact. 


(iii)  Static  Crush.  The  recorder  shall  be  subjected  to  a 

static  crush  force  of  kli  (5,000  lbf)  applied 

continuously  but  not  simultaneously  to  each  of  the 
three  axes  in  the  most  critical  direction,  for  a  period 
of  5  minutes. 

(iv)  Fire .  At  least  % of  the  outside  area  of  the  recorder 
shall  be  subjected  to  flames  of  at  least  1100°C  for  a 
period  of  30  minutes. 
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(v)  Fluids  (exceptinr  seawater).  The  recording  medium 
shall  be  immersed  for  2E  hours  in  each  of  the 
following  fluids:- 

Aircraft  fuel  -  J.P.l  (Kerosene) 

D.Eng.  RD2h&? 

DTD  5B5, 

Phosphate  ester 
based  fluid 

Fire  Extinguishing  Fluids  -  Water  glycol  +  62m  water, 

COp  foar,,  methyl  bromide, 
freon  1?,  standard  foam 
liauid,  dry  powder,  CTC, 
BTK,  BCF. 

(vi)  Sea  V.'ater.  The  recorder  or  the  recording  medium  shall 
be  immersed  in  sea  water  for  30  days. 

NOTE:  Where  the  recording  medium,  is  immersed  in  sea  water 

the  recorder  need  not  be  subjected  to  the  tests  specified 
in  3.B.3  (a)  (ii). 

3.9  Declarations 

3.9.1  Sem ral .  All  the  items  of  equipment  which  comprise  the  flight 
data  recorder  system  shall  be  designed  in  accordance  with  BCAR 
Sections  D,  J  and  R  as  appropriate  and  constructed  in  accordance 
with  the  relevant  requirements  of  3S  30100  Fart  1. 

Tests  shall  be  carried  out  to  prove  compliance  with  the 
environmental  test  requirements  of  bb  >3100,  1  art  2  or  other 
Apr  roved  specification,  and  with  the  electrical  requirer.ents  of 
Bb  VjIOO,  Part  3« 

3.10  Vibration  Tests  (Flirht  Data  Recorder).  In  addition  to  the 
renuirem  nts  of  3-9,  it  snail  be  Ehown  either  by  test  or  analysis  that 
the  recorder  will  continue  to  function  without  loss  of  data  when 
subjected  to  vibration  conditions  corresponding  to  *  1  'g'  at  1  Hz 

for  periods  of  not  less  them  10  seconds  in  each  of  the  three  major  axes. 

The  recorder  shall  be  tested  under  the  same  mounting  conditions 
as  declared  for  the  vibration  tests  called  up  in  3»9» 

3.11  Normal  Acceleration  Transducer  Performance.  The  damping  factor 
shall  be  not  less  than  0-7  of  critical  damping  and  the  total  error  in 
following  a  single  triangular  acceleration  pulse  of  0*5  second  duration 
or  greater,  shall  be  no  more  than  1CV  of  the  accel eration.  The 
output/input  ratio  shall  not  vary  by  more  than  1  >d3  when  the 
transducer  is  subjected  to  a  sinusoidal  '  g*  input  within  the  range  of 
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0  to  4  ri z.  Above  4  Hz  the  output  signal  shall  decrease  at  not 

less  than  6  dB  per  octave. 

NOTE:  It  is  recommended  that  at  least  some  of  the  attenuation  is 

provided  in  the  mechanical  design  of  the  transducer,  in  order  to 
avoid  saturation  due  to  noise  or  high  frequency  inputs.  Attenuation 
wholly  provided  by  electrical  filtering  is  unlikely  to  be  acceptable. 

3.12  Declarations 


3.12.1  Equipment.  The  Applicant  for  Approval  of  an  item  of 

equipment  shall  produce  a  Declaration  of  Design  and  Performance  in 
accordance  with  the  requirements  of  BS  3^100,  Part  1.  The  CAA 
if  satisfied  will  approve  the  item  in  relation  to  this  Declaration. 

The  Declaration  shall  in  addition  to  that  required  by  BS  3G100, 

Part  1,  contain  the  following  information:- 

(a)  A  statement  of  the  relevant  parts  of  this  Specification  with 
which  the  design  complies. 

(b)  For  transducers  a  statement  showing  compliance  with  3-3 
and  3-4  of  this  Specification. 

(c)  Any  other  specification  which  has  a  bearing  on  the  design, 
and  the  degree  of  compliance. 

(d)  Any  limitation(s)  in  the  use  of  the  equipment  in  relation  to 

a  flight  data  recorder  system  (e.g.  mounting  attitudes,  location, 
input-output  characteristics,  interface  requirements,  etc.). 

3-12.2  Systems.  The  Applicant  for  Approval  of  the  flight  data 

recorder  system  shall  produce  a  Declaration  of  Design  and  Performance. 
The  CV.A  if  satisfied  will  approve  the  system  in  relation  to  this 
Declar  tion. 

The  Declar 'tion  shall  contain,  in  addition  to  the  information 
required  by  BS  3^100,  Part  1,  Appendix  A,  the  following: - 

(a)  A  list  of  the  equipments  (including  Approval  Numbers  if  any) 
which  are  necessary  to  the  system. 

(b)  A  statement  of  system  accuracy  (referred  to  in  Table  l) 
throughout  the  environmental  range  over  which  the  equipments 
are  declared.  (A  calibration  report  should  be  included  with 
the  relevant  test  reports). 

(c)  A  statement  of  the  degree  of  compliance  with  the  reouirements 
of  this  Specification  (with  the  relevant  test  reports). 

(d)  Confirmation  of  the  availability  of  read-out  facilities 
capable  of  complying  with  the  requirements  of  paragraph  2 
of  this  Specification. 
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(e)  Maintenance  procedures  necessary  to  maintain  system 
reliability  to  the  requirement c  of  paragraph  6. 

1 N oTALLATl  ON  Utlb  U I  N EM ENTS 

4.1  General 


4.1.1  The  flight  data  recorder  system  shall  be  of  an  approved  type 
and  shall  be  installed  in  accordance  with  the  appropriate  provision 
of  British  Civil  Airworthiness  Requirements  Sections  V  and  J. 

The  system  shall  be  so  installed  that  in  normal  working 
conditions  it  shall  be  operating  .under  the  environmental  conditions 
to  which  the  items  of  equipment  comprising  the  system  have  been 
declared. 

4.1.2  Where  the  system  is  connected  to  mandatory  instruments  or 
data  sources  used  for  controlling  or  indicating  the  flight  path 
of  the  aeroplane,  compliance  shall  be  shown  with  Chapter  D4-1, 
paragraph  6. 

NOTE:  Provision  of  suitable  isolation  between  the  instruments  or 

dat.  sources  and  the  flight  data  recorder  system  would  be  an 
acceptable  means  of  compliance. 

4.2  El c ctri col  Surm-Iv.  The  electrical  supply  to  the  flight  data 
recorder  oyster-  snail  be  of  the  highest  practicable  reliability,  hut 
need  not  be  tn.ven  from  the  aeroplane’s  emergency  source  of  supply. 

4.3  Operation  am  Termination 

4.^.)  Cpernt.on  shall  be  tutomatically  initiated  trior  to  the 

1  ,.r.e  t  irt.n  *.c>  rove  tin  rer  its.  own  power,  and  shall  cease 
at  the  pik  e*  »•<  f  1  i  <*ht  vri**n  the  aeroplane  is  no  longer  capable 
of  rovinr  u-idfr  .  t  -  n»n  power. 

4.’.,'  ,.n  avit  n».i  t  ,  r  means,  shall  be  provided  to  inhibit  operation 

vaer,  rt  "un-i  ■  ■■  ,  •  i.ary  sow  r  only  is  being  supplied  to  the 
a '  r  *. ;  i .  ■  r.  r  . 

Hl'Tb:  Override  facilities  may  be  provided  for  ground  test  purpose 

4.4  Svnt  hrr-n:  .-.at  .  »n  of  Flight  L  ata  and  Voice  Kecorders.  Where 
aeroplanes,  .are  ream  red  tc  carry  both  fitrht  data  and  voice  recorders 
the  pilot's  "i  rer.r.  to  Transmit"  action  shall  be  recorded  as  an  event 
mark  on  the  flight  data  recorder,  n  order  to  correlate  data  and 
voice  recordings. 

4.5  Normal  Accelcrat ■ on  Transducer.  The  normal  accelerometer  shall 
be  rigidly  attacaed  an<-  locatea  along  the  longitudinal  axis  within 
t!:e  permitted  centre-of-gravi  ty  range  of  the  aeroplane  ir  a  ranr.er 
such  that  the  pel  "ormance  will  not  be  significantly  affected  by 
structural  modes  or  vibrations. 
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4.6  rrreeri  imr:  Altitude  Data  lO'irceF..  It  is  nermi ssible  to 

obtain  airspeed  and  altitude  data  from  either  of  the  pilot's  instrument 
system.  Where  t:.e  data  is  obtained  from  a  sc- rare te  source,  this 
source  shall  have  eouivalent  integrity  and  accuracy.  Position  error 
information  consistent  with  that  required  for  the  nilot's  instrument 
systems  shall  be  provided  by  the  Applicant  for  approval. 

NOTE:  In  these  circumstances  both  dimensional  and  non-dimensional 

free-air  position  error  correction  curves  will  have  to  be  provided. 

Data  in  (ground  effect  for  the  normal  take-off  and  landing  configurations 
and  conditions  should  also  be  aided.  Limits  of  applicability 
(e.g.  sicieslic;  reverse  thrust;  stall  proximity)  will  have 
to  be  specified. 

4.7  Location 

4.7.1  In-so-far  as  it  is  practicable,  the  recorder  shall  be 
installed  as  far  to  the  rear  if  the  aeroplane  as  possible, 
consistent  with  reasonable  maintenance  access,  in  a  position  to 
minimise  the  probability  of  q  image  from  crash  impact  and  subsequent 
fire. 


4.?.?  The  recorder  shall  remain  attached  to  the  local  structure 
under  normal,  longitudinal,  and  transverse  accelerations  of  15  'g'. 

4.7.3  Wnere  the  vibration  of  the  airframe  exceeds  the  limits  to 
which  the  equipment  has  been  tested  at  the  location  in  which  the 
recorder  is  installed,  additional  vibration  testing  within  the 
vibration  spectrum  of  that  location  shall  be  undertaken  to  ensure 
that  the  recorder  will  continue  to  function  within  its  performance 
specification.  In  such  circumstances  the  attachments  and  mounting 
attitude  shall  be  designed  to  bring  the  recorder  environment  within 
the  declared  limits  of  the  equipment. 

4.?  oysters  Accuracy.  The  flight  data  recorder  system  shall  comply 
with  the  accuracy  requirements  of  Table  1.  A  record  shall  be 
provided  of  an  input  to  output  calibration  of  tue  system  throughout 
tue  typical  operating  range  of  the  required  parameters.  A  read-out 
of  a  ty-col  flight  shall  be  provided  whose  data  shall  be  correlated 
w'th  that  of  the  pilot  instruments,  e.g.  airspeed,  altitude  and 
ru-rctic  heading.  The  quality  of  data  shall  not  be  less  than 
t  lat  rec Jired  by  para.  6.1.1. 

ACCIDENT  INVESTIGATION  REOUISE.  ENTS 

5-1  Genera] ,  In  order  to  ensure  a  hirh  probability  of  flight 
recorded  data  being  readily  available  for  analysis  followin'  ar. 
accident  and  to  comply  with  the  read-out  procedures  specified  in 
the  Maintenance  Schedule,  the  equipment  manufacturer  is  required 
to  confirm  the  availability  of  read-out  facilities  capable  of 
complying  with  paragraph  5*2. 
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5.2  Reac-out  Renin  rem.ent  s.  It  shall  he  possible  to  provide, 
within  2A  hours  of  receipt  of  unblemished  data:- 

(a)  a  lasting  analogue  presentation  of  the  recorded  parameters 
(not  necessarily  including  calibration  correction)  for  the 
entire  accident  flight  in  graphical  form  for  visual 
assessment,  and 

(b)  a  print-out  of  the  original  data,  or  calibrated  data,  in 
engineering  units  and  decimal  form. 

NOTE:  It  is  considered  that  this  would  normally  involve  the 

provision  of  data  on  a  computer  compatible  magnetic  tape. 
Continuous  manual  processing  will  not  be  an  acceptable  means 
of  compliance. 

RiXUIREr-SNTS  FOR  RELIABILITY  A.1D  KaINTENANCE  • 

6.1  Reliability  Recuirements.  In  order  to  ensure  a  reasonable 
probability  that  data  will  be  available  for  accident  investigation 
purposes,  it  is  required  that,  from  an  adequate  and  representative 
sample  of  all  the  evidence  available  from  record  read-out  (i.e.  read¬ 
out  for  maintenance  and  any  other  purposes) ,  including  flights 
started  with  a  known  unserviceable  flight  data  recorder,  the  aeroplane 
operator  shall  show  to  the  satisfaction  of  the  CAA  that  there  is 
a  92E  probability  that  data  is  being  recorded  to  a  standard  which 
will  not  significantly  degrade  the  type  of  analysis  which  would  be 
carried  out  in  the  majority  of  cases  of  accident  investigation. 

6.1.1  Investigation  Data  Standard,  The  standard  of  data  available 
shall  be  assessed  on  inspection  of  the  read-out  from  a  completed 
flight,  including  a  period  of  cruise  at  a  representative  altitude 
and  the  periods  required  by  the  Air  Navigation  Order  before  and 
after  the  airborne  portion  of  the  flight. 

NOTE:  For  the  purposes  of  the  above  requirement,  a  satisfactory 

standard  implies  that  successive  errors  and  the  overall  error 
rate  on  any  or  all  parameters  are  sufficiently  infrequent.  The 
assessment  may  be  carried  out  by  a  simple  visual  appraisal  of  an 
analogue  record.  Where,  however,  it  is  desired  to  use  other 
methods,  or  where  the  results  of  the  visual  assessment  are  doubtful, 
the  following  guidelines  may  be  used  to  indicate  a  standard  which 
is  the  minimum  likely  to  be  acceptable: - 

(1)  Isolated  significant  errors  on  any  parameter  should  not 
occur  more  frequently  than  once  in  20  words  of  that  parameter. 

(2)  Successive  significant  errors  on  any  parameter  should  not 
occur  more  frequently  than  once  per  5  minutes,  and  not  for 
a  period  longer  than  5  seconds. 
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(3)  Lobe  of  data  on  several  or  all  parareters  should  not  be 
such  that  data  is  lost  for  rrore  tnan  6  seconds  in  any 

2  minutes. 

(4)  The  total  loss  of  a  single  oarameter  due  to  a  flight  data 
recorder  system  malfunction  should  be  regarded  as  a  loss 
of  ?.Qf/c  of  all  information  in  an  eight  or  nine  parameter 
system.  In  a  full  2 6  parameter  system  the  total  loss  of 

a  single  parameter  should  be  regarded  as  a  loss  of  5 k  of  all 
information. 

6.1.2  Achievement  of  Reliability  Requirement 

(a)  To  demonstrate  conoliance  with  6.1  the  aeroplane  maintenance 
schedule  shall  specify  the  periodic  read-out  of  the  recorded 
data.  The  period  between  read-outs  is  assessed  on  the 
basis  of  available  supplementary  checks  (e.g.  periodic  tests 
by  ground  test  on  built-in  test  equipment,  a  monitor  with 

a  high  probability  of  detecting  failure,  and  on  the 
demonstrated  equipment  installation  reliability  standards). 

(b)  The  aeroplane  operator  shall  review  periodically  the  standards 
being  achieved  and,  in  agreement  with  the  CAA,  adjust  the 
check  periods  accordingly,  subject  to  the  minimum  reliability 
standards  being  maintained. 

6.2  Calibration.  To  ensure  that  the  accuracy  of  data  sources  is 
being  maintained,  those  snail  be  calibrated  at  intervals  to  be 
specified  in  the  aeroplane  maintenance  schedules.  The  most  recent 
calibration  shall  be  retained  by  the  aeroplane  operator. 

To  ensure  that  the  overall  system  performance  is  maintained  an 
input  to  output  system  functional  check  for  a  minimum  number  of 
representative  sources,  shall  be  required  at  intervals  to  be  specified 
in  the  aeroplane  maintenance  schedule. 

6.3  Overhaul.  Equipment  overhaul  periods  shall,  where  appropriate, 
be  specified  in  the  aeroplane  Kaintenance  Schedule. 

6.4  Pp cord  detention.  The  records  required  to  be  retained  in 
accordance  with  the  Air  Navigation  Order  shall  be  in  the  form  of  an 
analogue  trace  or  a  digital  transcription  or  the  original  record. 

The  time  scale  shall  be  such  that  the  data  can  be  read  to  an 
accuracy  of  1  second  or  less. 
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r’aramet.’r 

Record  Interval 
(Secs) 

See  Note  1 

Minimum 

Range 

Accuracy 

Remarks 

1  Time 

1 

0*125k  hour 

GKT  or 
elapsed  time 

2  tTessure  Altitude 

1 

1 

-305m(-l, 000ft)  to 
max.  certificated 
altitude  of  the 
aeroplane  +  1524m 
(5,000  ft). 

RSS  value  of 
scale  error  test 
of  G.115  and 
recording  and 
readout  error 

1  15m  (50ft) 

3  Airspeed 

! 

t 

1 

1 

t 

I 

60  kts  to'  Vrflp 
+20  kts 

Such  that  error 
will  not  exceed 
tjgi  at  speeds  at 
and  above  the 
stalling  speed  of 
the  aeroplane  at 
the  maximum 
landing  weight 

Accuracy 
related  to 
pitot  minus 
static 
pressure 

4  Norral  Acceleration 
(ie  normal  to  the 
longitudinal  and 
lateral  axes  of  the 
aeroplane) 

i 

i 

-3'g*  to  +6'g' 

io*086’g'  measured 
at  each  increment 
of  one  'g*  from 

1  'g'  datum 
(excluding  long 
term  datum  drift) 

See  para. 

3.11 

5  Compass  leading 

i 

360° 

t2° 

6  Gyro  Pitch  Attitude 

i 

i 

I 

180°  or  max. 
pitch  angle 
normally  available 
from  the  attitude 
transmitter. 

i2°  or  tl05»  of 
increment  from 
level  flight 
indication, 
whichever  is  the 
greater 

7  Gyro  Roll  Attitude 

* 

i 

i 

i 

±180° 

*3°  or  10#  of 
increment  from 
level  flight 
indication, 
whichever  is 
the  greater 

8  Engine  l  over  (each 
engine)  EFR  or  F7 

1  One  Engine  to  be 
]  sampled  each  sec. 

Full  Range 

Such  that  thrust 
can  be  determined 

for  turbojet  aero- 

1  (ie  a  4-engined 

to  within  ilOfc 

planes.  Torque  and 
RRK  for  propeller 
driven  aeroplanes 
(Note  2) 

' 

t 

; 

aeroplane  will 
have  a  particular 
engine  sampled 
every  4  secs  but 
with  a  one  second 
stagger  between 
different  enrines. 
3-enpined  aero- 
[  planes  may  sample 
i  each  engine  every 

4  secs  if  longitu¬ 
dinal  acceleration 
is  being  recorced.) 

full  thrust 

\ 
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Accuracy 


Remark. 

i 


9  Flop  An-le  (Note  3) 

Full  Range 

Such  that  each 

L’ce  of  flar. 

gated  position  is 

selector  an 

unambi ruously 

data  source 

determinable  from 

will  not  be 

the  record 

acceptable 

10  "1  reo6  to 

1 

Event  Hark 

Transmit"  Action 

11  Lateral 

i 

ii'g* 

t0*02g  or  1%  of 

Acceleration 

increment  from 
zero  datum,  which 
ever  is  the 
greater,  (exclud- 

•  ing  long  term 
datum  drift). 

12  Longi tu iinal 

1 

ti’g* 

As  for  Lateral 

Acceleration 

Acceleration 

L3  Reverse 

4  (1  second 

Event  Mark 

See  para¬ 

(each  engine) 

stagger) 

meter  6  re- 
three  enginec 
aeroplanes 

L4  Leading-edge  high 

Event  Mark 

lift  devices 
where  fitted- 

position  of  cock¬ 
pit  control 

15  Airbrakes  or 

* 

Event  Mark 

spoilers  where 
fitted  -  position 
of  cockpit  control 

t6  Fitch  lrim 

* 

Full  Range 

-35“  of  full  range 

t7  Temperature 

2 

Covering  OAT 

Such  that  indica¬ 

TAT,  SAT, 

range  of  -90°C 

ted  OAT  can  be 

OAT  etc 

to  +45°C. 

determined  to 

may  be 

within  ±3°C. 

recorded. 

18  Undercarriage 

2 

Event  Mark 

Indication  ol 
"Under¬ 

carriage  in 
Transit" 

L9  Primary  flying 

i 

Full  Range 

or  3  of  full 

Control 

Controls 

movement,  which¬ 

Surface 

(Note  A) 

ever  the  greater 

rosi  tior. 

Full  Range 

-3/=  of  Full  Range 

Control 

Input 

Posi  ti  on 

l2??N(-501bf ) 

t  44N(tlO  lbf) 

Column  Force 

*156N(t351bf) 

1  31N(1  7  lbf) 

Wheel  Force 

i666N(H5oibf) 

1133N(±30  lbf) 

Pedal  Force 

?0  1LS  Local  iser 

1 

*150  micro-amps 

135 «  of  full  range  1 

Signal 

a  f. 
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1  Parameter 

Record  Interval 
(Secs) 

See  Note  1 

Mini  mum 

Range 

Accuracy 

Remarks 

21  1L3  Glideslope 
Signal 

1 

^150  micro-amps 

-3>:  of  full  range 

22  Radio  -.ltitude 

1 

?Om  (230  ft) 
downwards 

io*6m(-2ft)  or 
-3/;  of  indicated 
height,  whichever 
i6  the  greater 

If  provided 

23  Essential  AC 
Voltage  or 
frequency 

*  2 

30°  to  120.  of 
normal  value 

1 

of  normal 
value  (Voltage) 

-1&  of  normal 
value  (Frequency) 

Parameter  tt 
be  selected 
on  basis  of 
value  of 
data 

24  Warn  in  ;s 
(Note  ji) 

25  Automatic  flight 
control  system 
engagement 
(Note  6) 

26  automatic  flight 
control  system 
mode 

(Note  7) 

See  Remarks 

Column 

Event  Marks 

Event  Marks 

Event  Marks 

The  Record 
interval  of 
parameters 
24,  25  and 
26  can  be 
adjusted  to 
suit  4  sec 
frame 

NOTES:  (l)  The  record  interval  is  the  maximum  time,  *1/64  seconds, 

between  successive  samples. 


(2)  Where  auxiliary  thrust  units  are  provided  it  will  be 
acceptable  to  record  an  event  mark  denoting  the  attainment 
and  removal  of  a  selected  high  level  of  power  output. 

(3)  Where  gated  flap  positions  are  provided  and  intermediate 
selections  are  not  possible  a  record  by  means  of  event 
marks  will  be  acceptable,  provided  that  they  are  derived 
from  the  operating  mechaniBm  and  not  from  the  flap  selector. 

(4)  Where  there  are  only  one  or  two  control  surfaces  in  each 
plane,  measurement  should  be  taken  from  each  surface;  where 
more  than  two  surfaces  are  nrovided  the  measurement  should 
be  taken  from  a  common  stage  (preferably  that  stage  which 
is  closest  to  the  control  surfaces)  in  the  control  run. 
"Column/V.'heel/Pedal"  forces  will  be  an  acceptable  alternative 
to  control  surface  deflections  providing  that  the  measurements 
are  taken  at,  or  immediately  adjacent  to,  the  operating 
controls.  In  complex  systems  it  may  be  necessary,  if  not 
already  covered  by  parameter  24,  to  monitor  "Systems  Status" 
in  addition  to  Deflections/Forces. 
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(5)  Warnings  should  cover  the  following: - 


\ 


Fire  (Each  Engine  and  APU) 

Cabin  Pressurisation 

Other  Red  Light  Warnings  leading  to  engine  shut  down 
Fuselage  Smoke 

Essential  Hydraulic/Pneumatic  Power. 

(6)  Autopilot  Engagement  of  each  control  axis  (i.e.  Pitch, 

Roll,  Yaw,  Autothrottle  and  Autolift  Devices)  where 
these  are  independently  selectable.  Basic  autopilot 
engagement  to  be  recorded  where  axes  are  not  independently 
selectable. 

(7)  Selection  of  each  "Capture"  or  "Acquire"  mode,  and  Autoland, 
to  be  recorded  together  with  autoland  selection  (i.e.  Prime 
Land). 
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APPENDIX  B 

DATA  ON  MAXIMUM  RATES  OF  CHANGE  OF  PARAMETERS  FOR  THE  F- 16 


AIRESEARCH  MANUFACTURING  COMPANY 


Crash  Survlvable  Flight  Snte  Recorder  Study 


Fcr  the.  lenerrl  Dynamics  F*b  Aircraft  the  follow! nf  inform¬ 
ation  was  obtained  during  our  visit  to  Lripht  Futteracn  AFB. 

Lieetiiif  s  were  held  with  Kelvin  Lerute  on  2Cth  October  and 
with  1:;  y  Anders ,  btfci  her  Kcupt  end  other  personnel  trot,  the  Fib 
SIC  ur»  the  fist  October. 

Attached  is  r.  list  of  the  part  meters  with  deteils  at  supplied 
by  J'e'vin  [.erase.  The  parameters  used  for  the  Sifnel  Dete  Recorder 
oi.±y  tie  eveileb^e  or.  -5  *>  of  the  sire  reft .  However,  the  wirli.r;  ic 

provided  on  s  .1  ■ . trcrrft. 

We  have  requested  via  M<  jor  Sckopf  a  copy  of  the  Interface 
Contrc .  document  for  this  aircraft  which  provides  full  deteils  of 
eech  of  the  a  if’- a. is.  The  aircraf l  has  t  Sperry  C/.DC  synterc. 

It  was  cu^erted  that  the  FDR  would  best  repiece  the  structural 
integrity  ncr.itorin/*  system  whica  is  cited  aft  of  the  cockpit.  In 
addition  to  this  space  }  cu.ft.  is  available  in  c  similar  location. 

Ine  tail  section,  wing  tip  ami  tell  booms  were  considered  the 

moot  .'•urvivubie  rrcv.r. 

..e  :r  o/e^ier  have  a  contract  for  a  Flight  Conti'o;  system 
recorder  which  record.-  cvcrv  64  sec,--.,  the  .-rtt.tur  of  the  f  ’iyht 
conti-o  ;  y;  to..  tr . tnor  with  a  .limited  lumber  of  f ^  ipat  profile- 
ptiu  e-tcr.  ,  in  cddfiiicr.  this  cycler,  records  whenever  there  is  a 
ch;  ni  f  in  a  f_ij:Lt  enr-troi  statin'.  Three  isetscry  iscdules  are 
prevised,  to  record  ir.  parallel,  one  is  located  on  the  pilotc 
ejection  seat,  one  in  t.  wing  tip  end  the  third  within  the  equipment . 
So  fcr  one  syrter  has  beer,  delivered.  The  memory  modules  utilize 
GI  !i  AHO.M  *  £ . 
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APPENDIX  C 

PARAMETER  LIST  FOR  TURBINE  ENGINE  MONITORING  SYSTEM  (TEMS)  USED  ON  A 

LIMITED  NUMBER  OF  A-10'S 
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APPENDIX  D 

PARAMETER  LIST  FOR  F-IOI  CENTRAL  INTEGRATED  TEST  SUBSYSTEM  EVALUATION  (CITS) 
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AFWAL-TR-80-2002 


FI 01  CENTRAL  INTEGRATED  TEST 
SUBSYSTEM  EVALUATION 


GENERAL  ^  ELECTRIC 

FEBRUARY  1980 


TECHNICAL  REPORT  AFWAL-TR-80-2002 

FINAL  REPORT  FOR  PERIOD  2  APRIL  1979-31  DECEMBER  1979 
AMOVED  FOR  PUBLIC  RELEASE;  DISTRIBUTION  UNLIMITED 


AERO  PROPULSION  LABORATORY 

AIR  FORCE  WRIGHT  AERONAUTICAL  LABORATORIES 

AIR  FORCE  SYSTEMS  COMMAND 

WRIGHT  PATTERSON  AIR  FORCE  BASE,  OHIO 
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Table  1.  Engine  CITS  Processor  Signals.  Table 
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Table  3.  Aircraft  Parameter/Information  Required  for  Engine  CITS. 


Nomenclature 


Abbreviation 


Anti-ice  Switch  Position 
Start,  Start 
Start,  Stop 

Engine  Ignition,  Continuous  Position 

Engine  Ignition,  Off  Position 

Speed  Lockup 

Condition  Reset 

Anti-icing  System  Demand 

Airflow  Limit  Signal 

Aircraft  On-ground  Status 

Secondary  Power  System  Status 

Thrust  Control  Position 

Engine  Throttle  Control  System  Error 

Fuel  Inlet  Temperature 

Inlet  Control  System  Status 

Date 

Time 

Aircraft  No. 

Engine  Serial  No. 

Engine  Position 

LCF  Cycles  (computed  from  NF,  NC,  Pg3,  and  T^g) 

Overspeed  -  Time  Versus  NF  and  NC 
Overtemp  -  Time  Versus  T^g 
CITS  Thrust  (calculated) 

Fault  Detection/Isolation  Output  (from  engine  CITS  logic) 


AISP 
ENG  STRT 
ENG  STOP 


TF 


S/N 

El.E2.E3.E4 


NOTES  1.  Signals  are  acquired  by  CITS  from  A/C  EMUX. 

2.  PLA  LCF  cycles  are  substituted  for  Pg3  LCF  cycles  on 
flights  after  4-12. 
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Table  4.  CITS  Trending  Data  Requirements. 


NF 

Fan  Speed 

NC 

Core  Speed 

AFF 

Airframe  Fuel  Flow 

CFF 

Core  Fuel  Flow 

T4B 

Engine  -  Temperature 

FGC 

Calculated  Thrust 

PT2 

Engine  Inlet  Pressure 

T2 

Fan  Inlet  Temperature 

PT25 

Fan  Discharge  Pressure 

PS  3 

Compressor  Discharge  Pressure 

A8  (EIS ) 

Nozzle  Area  (Engine  Instruments) 

DP/P 

Fan  Duct  Pressure  Ratio 

BF 

Inlet  Guide  Vane  Angle 

FWDVIB 

Forward  Vibration 

FWDFVIB 

Forward  Fan  Vibration 

MIDV1B 

Midvibration 

MIDFVIB 

Midfan  Vibration 

MIDCV1B 

Midcore  Vibration 

AFTVIB 

Aft  Vibration 

PL 

Lube  Pressure 

TL 

Lube  Temperature 

QL 

Lube  Quantity 

AISP 

Anti-ice  Switch  Position 

PLA 

Power  Lever  Angle 

MO 

Mach  Number 

PS 

Static  Pressure 

CWA 

Check  Word  A 

A8TM 

Nozzle  Actuator  Torque  Motor  Current 

MTM 

Main  Torque  Motor  Current 

WFRTM 

Augmentor  Fuel  Valve  Torque  Motor  Current 

BFTM 

Fan  IGV  Torque  Motor  Current 

A8 

Nozzle  Actuator  Position  (CITS  Processor) 

PAUGSW 

Augmentor  Permission  Signal 

FDS 

Flame  Detector  Signal 

PWFR 

Augmentor  Fuel  Pressure 

WFR/PS3 

Augmentor  Fuel  Valve  Position 

TF 

Engine  Fuel  Inlet  Temp 

FFLT 

CITS  Flight/Grouna  Discrete 

LE 

ETCS  Loop  Error  Signal 

TCL 

ETCB  Thrust  Control  Lever  Position 

REF 

ETCS  Control  Reference  Voltage 

TFAT 

Free  Air  Stream  Temp 

S/N 

Engine  Serial  Number 

AICD 

Anti-ice  Command 

A/C  # 

Aircraft  Number 

POS 

Position 

DATE 

Date 

TIME 

Time 

FLIGHT 

Flight 

QL/T 

Lube  Cons umpt ion  ( 1 ) 

(1)  Calculated  rate  based  on  oil  added  between  flights  by  maintenance. 
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APPENDIX  E 

TYPICAL  ENGINE  MAINTENANCE  SYSTEM  PARAMETER  LIST, 
SOCIETY  OF  AUTOMOTIVE  ENGINEERS,  INC. 


AlftCSEARCH  MANUFACTURING  COMPANY 


TYPICAL  EMS  PARAMETER 
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APPENDIX  F 

FAR'S  FOR  CRASH  PROTECTED  FLIGHT  RECORDERS  AND  COCKPIT  VOICE  RECORDERS 
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1 116.1  AffUcakUitr. 

(»)  Except  ft*  provided  _  paragraph 
(b)  of  this  Motion,  this  *rftrt  prescribes 
rules  governing— 

(I)  Air  Uxi  operations  conducted 
under  the  exemption  ftuthorlty  of  Pftrt 
gse  of  this  title. 

(j)  The  trmnsportfttlon  of  mail  by 
ftlrcreft  conducted  under  ft  postsJ  serv¬ 
ice  contract  swarded  under  section 
M02c  of  Title  39.  United  Sutes  Code; 

O)  The  carrying  In  sir  commerce  by 
any  person.  outer  than  as  an  sir  earn¬ 
er,  oi  persons  or  properly  "lor  compen¬ 
sation  or  hire  (commercial  operations) 
In  aircraft  having  a  maximum  passen¬ 
ger  seating  configuration,  excluding 
anv  pUot  »cat.  of  30  seats  or  leas  and  a 
maximum  payload  capacity  of  7,500 
pounds  or  less;  and  T 

(4)  Each  person  who  la  on  board  an 
aircraft  being  operated  under  this 
part. 

(b>  This  part  does  not  apply  to¬ 
ll)  Student  Instruction; 

(3)  Nonstop  sightseeing  flights  that 
begin  and  end  at  the  same  airport,  and 
are  conducted  within  a  25  statute  mile 
radius  of  that  airport; 

(J)  Perry  or  training  flights; 

(4)  Aerial  work  operations,  includ¬ 
ing — 

(1)  Crop  dusting,  seeding,  spraying, 
and  bird  chasing; 

(U>  Banner  towing; 

(Ul>  Aerial  photography  or  survey. 
(|v>  Fire  fighting; 

(v)  Helicopter  operations  In  con¬ 
struction  or  repair  work  (but  not  in¬ 
cluding  transportation  to  and  from 
the  site  of  operations);  and 
(vl)  Powerline  or  pipeline  patrol; 

(5)  Sightseeing  flights  conducted  In 
hot  air  balloons; 

(6)  Nonstop  flights  conducted  within 
a  25  statute  mile  radius  of  the  airport 
of  takeoff  carrying  persons  for  the 
purpose  of  Intentional  parachute 
lumps; 

(7)  Helicopter  flights  conducted 
within  a  25  statute  mile  radius  of  the 
airport  of  takeoff.  If— 

(I)  Not  more  than  two  paaMngers  are 
carried  in  the  helicopter  In  addition  to 
t be  required  flight  crew, 

(ID  Each  flight  is  made  under  VFR 
during  the  day; 

(UD  The  helicopter  used  is  osrtlflcat- 
od  In  the  standard  category  and  com¬ 
piles  with  the  100-hour  Inspection  re¬ 
quirement*  of  Pari  51  of  this  chapter. 


(It)  The  operator  notifies  the  PAA 
Plight  Standards  District  Office  re 
sponsible  for  the  geographic  area  eon 
eemed  at  least  72  hours  before  each 
flight  and  furnishes  any  essential  in¬ 
formation  that  the  office  requests. 

(v>  The  numbei  of  flights  does  not 
exceed  a  total  of  six  In  any  calendar 
year. 

(vl)  Each  flight  has  been  approved 
by  the  Administrator,  and 

(vti )  Cargo  is  not  carried  In  or  on  the 
helicopter; 

(8)  Operations  conducted  under  Part 
IIS  or  875  of  this  title; 

(f)  Emergency  mall  Mrvice  conduct¬ 
ed  under  section  405(h)  of  the  Federal 
Aviation  Act  of  1958;  or 

(10)  Carriage  of  a  candidate  In  a 
Federal  election,  an  agent  of  the  can 
didate,  or  person  traveling  on  behalf 
of  the  candidate,  if— 

(i)  The  principal  business  of  the 
person  operating  the  aircraft  is  not 
that  of  an  air  carrier  or  commercial 
operator;  and 

(11)  The  payment  for  the  carriage  is 
required,  and  does  not  exceed  the 
amount  required  to  be  paid,  by  regula 
tions  of  the  Federal  Election  Commis 
aion  (11  CFR  Cnapter  1). 

The  terms  "candidate”  and  "election” 
have  the  same  meaning  as  that  set 
forth  In  the  regulations  of  the  Federal 
Election  Commission 

•  ISL2  Air  Iasi  qmtlOM  wtth  large  air¬ 
craft 

.(a)  Except  as  provided  In  paragraph 
(fi>  of  this  section,  no  person  may  con¬ 
duct  air  taxi  operations  In  targe  alr- 
eraft  under  an  individual  exemption 
and  authorization  issued  by  the  Civil 
Aeronautics  Board  or  under  the  ex¬ 
emption  authority  of  Part  298  of  this 
title,  unless  that  oerson- 
(I)  Complies  with  the  certification 
requirement*  for  supplemental  air  car¬ 
riers  In  Part  121  of  this  chapter, 
except  that  the  person  peed  not 
obtain,  and  that  person  is  not  eligible 
for,  a  certificate  under  that  part,  and 
(I)  Conducts  those  operations  under 
the  rules  o i  hart  131  of  this  chapter 
that  apply  to  supplemental  air  carri 
era 

However,  the  Administrator  may  issue 
operations  mec locations  which  re¬ 
quire  an  operator  to  comply  with  the 
rules  of  Part  121  of  this  chapter  that 
apply  to  domestic  or  flag  air  carriers, 
as  appropriate.  In  place  of  the  rules  re¬ 
quired  by  paragraph  (ax3>  of  this  sec¬ 
tion.  If  the  Administrator  determines 
compliance  with  those  rules  is  neces 
mry  to  provide  an  appropriate  level  of 
safety  for  the  operation. 
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(a)  No  person  Buy  operate  a  turbo 
let  airplane  having  »  passenger  seating 
configuration,  excluding  ary  pilot 
seat,  of  10  seats  or  more,  unless  It  is 
•quipped  with  an  approved  cockpit 
eolce  recorder  that- 

(1)  Is  Insulted  In  compliance  with 
.Part  25  of  this  chapter. 

(2)  Is  installed  and  operated  eontlnu 
ously  from  the  use  of  the  check  list 
before  the  flight  to  completion  of  the 
final  check  at  the  end  of  the  flight; 
and 

(3)  Has  erasure  features  that  may  be 
used  so  that  any  time  during  the  oper¬ 
ation  of  the  recorder.  Information  re 
corded  more  than  SOjg^^es  earlier 
may  be  erased  or  otherwise  obliterat¬ 
ed. 

(b)  In  the  event  of  an  accident,  or  oc¬ 
currence  requiring  immediate  notifica¬ 
tion  of  the  National  Transportation 
Safety  Board  which  results  in  terming 
Uon  of  the  flight  the  certificate 
bolder  shall  keep  the  recorded  Infer 
nation  for  at  least  00  days  or.  If  re¬ 
quested  by  the  Administrator  or  the 
Board,  for  a  longer  period  Informa¬ 
tion  obtained  from  the  record  may  be 
used  to  assist  In  determining  the  cause 
of  accidents  or  occurrences  In  connec 
tion  with  investigations.  The  Admlnls 
Irator  does  not  use  the  record  in  any 
Civil  penalty  or  cerUficate  action. 

1 135.1&3  Ground  proximity  warning 
system. 

No  person  may-  operate  a  turbojet 
airplane  having  a  passenger  seating 
configuration,  excluding  any  pilot 
seat,  of  10  seats  or  more,  unless  It  is 
equipped  with— 

(a)  A  ground  proximity  warning 
system  that  meets  1 37.201  of  this 
chapter;  or 

(b>  A  system  that  conveys  warnings 
of  excessive  closure  rates  with  the  ter 
rain  and  any  deviations  below-  glide 
slope  by  visual  and  audible  means 
This  system  must- 

11  )  Be  approved  by  the  Director. 
Plight  Standards  Service;  and 

(2)  Have  a  means  of  alerting  the 
pilot  when  a  malfunction  occurs  In  the 
system. 

<c)  For  the  system  required  by  this 
section,  the  Airplane  Flight  Manual 
shall  contain— 

<1)  Appropriate  procedures  for— 

ft)  The  use  of  the  equipment; 

(U)  Proper  flight  crew-  action  with  re¬ 
spect  to  the  equipment;  and 

fill)  Deactivation  for  planned  abnor¬ 
mal  and  emergency  conditions,  and 


ft)  An  outline  of  all  fciput  source 
that  must  be  operating. 

(d)  No  person  may  deactivate  a 
system  required  by  this  section  excep: 
under  procedures  In  the  Airplane 
Plight  Manual. 

<e)  Whenever  a  system  required  by 
this  section  is  deactivated,  an  entry 
shall  be  made  in  the  airplane  malnte 
nance  record  that  includes  the  date 

and  time  nf  deactivation _ — 

~  (f )  For  a  system  required  by  para 
graph  (b)  of  this  section,  procedures 
acceptable  to  the  FAA  Flight  Stand 
ards  District  Office  charged  with  the 
overall  inspection  of  the  certificate 
holder  shall  be  established  by  the  cer 
ttfieate  holder  to  ensure  that  the  per 
formance  of  the  system  can  be  appro 
priately  monitored 
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(a)  Mo 


■Mi Tini'nin 


rrcaG^jtaii 


ude  or  is 
e  powered,  unfet  II  b 
one  or  more  approved 


ins  Information  may 
be  determined  within  the  ranges  accu¬ 
racies.  and  recording  Intervals  specl 
fled  In  Appendix  B  of  this  Part— 

(1)  Time,  altitude,  airspeed,  vertical 
acceleration,  and  head  Ins.  and 

(?)  For  airplanes  having  an  original 
type  certificate- Issued  after  September 
30.  1969.  pitch  attitude,  roll  attitude, 
sideslip  angle  or  lateral  acceleration, 
pilch  trim  position,  control  column  or 
pitch  control  surface  position,  control 
wheel  or  lateral  control  surface  post 
tfon.  rudder  pedal  or  yaw  control  sur 
face  position,  thrust  of  each  engine, 
position  of  each  thrust  reverser.  trail 
Ing  edge  flap  or  oockptt  flap  control 
position,  and  leading  edge  flap  or  cock 
pit  flap  control  position 

<b)  Whenever  a  flight  recorder  re¬ 
quired  by  this  section  Is  Installed  it 
must  be  operated  continuously  from 
the  Instant  the  airplane  begins  the  la 
fceoff  roll  until  It  has  completed  the 
landing  roll  at  an  airport 

(cl  Except  as  provided  In  paragraph 
(d)  of  this  section,  and  except  for  re 
corded  data  erased  a*  authorized  in 
this  paragraph,  each  certificate  holder 
ahall  keep  the  recorded  data  pre 
periled  In  paragraph  (a)  of  this  section 
until  the  airplane  has  been  operated 
for  at  least  35  hours  of  the  operating 
time  specified  In  1 121  359  s)  A  total 
of  1  hour  of  recorded  data  may  be 
erased  for  the  purpose  of  testing  thr 
flight  recorder  o.'  the  flight  recorder 
system.  Any  erasure  made  In  accord 
ance  with  this  paragraph  must  be  of 
the  oldest  recorded  data  accumulated 
at  the  time  of  testing  Except  as  pro 
Tided  In  paragraph  (di  of  this  section 
no  record  need  be  kept  more  than  60 
days. 

(d)  In  the  event  of  an  accident  or  oc 
currence  that  requires  Immediate  noti¬ 
fication  of  the  National  Transports 
Uon  Safety  Board  under  Part  *30  of 
Its  regulations  and  that  results  In  ter 
mlnatlon  of  the  flight,  the  certificate 
holder  shall  remove  the  recording 
media  from  the  airplane  and  keep  the 
recorded  data  required  by  paragraph 
<a>  of  this  section  for  at  least  SO  days 
and  for  a  longer  period  upon  the  re 
quest  of  the  Board  or  the  Administra¬ 
tor. 

(c)  Each  flight  reoorder  required  by 
this  section  must  be  Installed  In  ac¬ 
cordance  with  the  requirements  of 
1 25  1459  of  this  chapter  In  effect  on 
August  SI.  1*77.  The  correlation  re¬ 
quired  by  paragraph  (c>  of  125.1459 
need  be  sstablished  only  on  one  air¬ 
plane  of  any  group  of  airplanes— 

(1)  That  are  of  the  same  type. 

(3)  On  which  Uie  model  flight  re¬ 
oorder  and  Ha  Installation  are  the 
same:  and 


(I)  On  which  there  Is  no  deference 
In  type  design  with  respect  to  the  in 
gtallatlon  of  those  first  pilot's  Instru 
]  menu  associated  with  the  flight  re 
|  eorder  The  mast  recent  Instrument 
calibration.  Including  the  recording 
medium  from  which  this  calibration  Is 
derived  and  the  recorder  correlation, 
j  must  be  retained  by  each  certificate 
bolder. 

tf)  Each  flight  recorder  required  by 
this  section  that  records  the  data  spec 
lfied  In  paragraph  caKl)  of  this  section 
must  have  an  approved  device  to  assist 
In  locatLng  that  recorder  under  water 
(g)  Each  flight  recorder  required  by 
this  section  must  record  data  from 
which  the  time  of  each  radio  transmis¬ 
sion  either  to  or  from  ATC  can  be  de¬ 
termined 

tAmdl  111-64  U  m  11191  A  us  II  1970 
u  amended  by  Arndt  111 -S3  M  PR  »5s; 

Dec  10.  1171  Arndt  121  -  ISO  41  PR  47JJV 

Oct  M.  1974  Arndt  Ill-Ill  41  PR  191*3 

July  II  1977  Arndt  111-141  41  PR  SS442 

May  U.  19711 


§  III  J64  Ctkgtt  rote  recsedeem 

(a)  No  certificate  holder  may  or*  • 
ate  a  large  turbine  engine  powered  a 
plane  or  a  large  pressurized  airpla 
with  four  reciprocating  engines  unit 
an  approved  cockpit  voice  recorder  l 
Installed  in  tha!”  alrpIEhe  kAS  is  or*  • 
sled  continuously  from  the  start  t 
the  use  of  the  checklist  (before  su* 
Ing  engines  for  thr  purpose  of  fhtv 
to  completion  of  the  final  checklist  a 
the  termination  of  thr  flight 

(b)  Each  certificate  holder  shall  e- 
tablish  a  schedule  for  eomplet,: 
before  the  prescribed  dates  of  tl 
cockpit  voice  recorder  Installation!  r- 
qulred  by  paragraph  (a  of  thu  * 
lion  In  addition  the  certificate  ho!* 
shall  Identify  any  airplane  specify  - 
paragraph  la'  of  this  section  he  i- 
tends  to  discontinue  using  before  t; 
prescribed  dates 

(c)  The  eoekplt  voice  rwoordr-  r 
qulred  by  this  section  must  meet  t' 
following  application  standards 
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(1)  The  raqulnonu  at  Put  It  of 

thil  chapter  In  affect  on  August  tl, 

t  m 

(2)  After  September  1.  1M0.  each  re¬ 
corder  container  must— 

(il  Be  either  bright  orange  or  brlcht 
yellow. 

(11  >  Have  reflective  tape  affixed  to 
the  external  surface  to  facilitate  Its  lo¬ 
cation  under  water,  and 

(111)  Have  an  approved  underwater 
locating  device  on  or  adjacent  to  the 
container  which  Is  secured  In  such  a 
manner  that  they  are  not  likely  to  be 
separated  during  crash  Impact,  unless 
the  cockpit  voice  recorder,  and  the 
flight  recorder  required  by  1121.243, 
are  Installed  adjacent  to  each  other  In 
such  a  manner  that  they  are  not  likely 
to  be  separated  during  crash  Impact 

Id)  In  complying  with  this  section, 
an  approved  cockpit  voice  recorder 
having  an  erasure  feature  may  be 
used,  so  that  at  any  time  during  the 
operation  of  the  recorder.  Information 
recorded  more  than  30  minutes  earlier 
may  be  erased  or  otherwise  obllterat 
ed 

(e)  In  the  event  of  an  accident  or  or 
currence  requiring  Immediate  notifies 
tion  of  the  National  Transportation 
Safety  Board  under  Part  630  of  Its  reg 
ulatlons.  which  results  In  the  termlns 
tlon  of  the  flight,  the  certificate 
holder  shall  keep  the  recorded  lnfor 
matlon  for  at  least  60  days  or.  If  re¬ 
quested  by  the  Administrator  or  the 
Board,  for  a  longer  period  Informs 
tlon  obtained  from  the  record  Is  used 
to  assist  In  determining  the  cause  o! 
Occidents  or  occurrences  In  connection 
with  lnvestlgstlons  under  Part  830. 
The  Administrator  does  not  use  the 
record  In  any  civil  penally  nr  certifi¬ 
cate  action 

(Bees  1  6  t  60  Btsl  Ml  «t  BkC  1652. 
1655  1657 ) 

(Doc  S256  29  TO  19205  Dec  11.  1S64  ss 
amended  b>  Arndt  131  20  11  TO  6912  June 
26  1966  Arndt  121-23  II  TO  15192  Dec  1 

1966  Arndt  121-32  22  TO  139M  Oct  6 

1967  Arndt  121  130  41  TO  47229  Oct  2* 

1976  Arndt  121  115  42  TO  16973  July  IS 

1977  Arndt  111-141.  41  TO  11642  Msy  15 

1976) 

1 121-666  G roved  proximity  wandaf-ffMe 
•tope  deviation  alerting  system 

(a)  Except  as  provided  In  paragraphs 
<b>  and  <h)  of  this  section,  alter  D» 
eember  I.  1675,  no  person  may  operate 
a  large  turbine-powered  airplane 
unless  It  is  equipped  with  a  ground 
proximity  warning  system  that  meets 
the  performance  and  environmental 
standards  of  TSO-CS2  or  Incorporates 
TBO-approved  ground  proximity 
warning  equipment 

(b)  O round  proximity  warning  sn 
terns  approved  for  use  under  this  Part 
and  Installed  before  June  2.  167$.  may 
be  used  In  lieu  of  equipment  that 
meets  the  perfomance  and  environ 
mental  standards  of  TBO-C92  or  Is 
TBO-approved  until  January  I.  1*77. 
except  that  the  requirements  of  pan 
graph  (c)  of  this  section  must  be  met 


<c>  for  the  ground  proximity  warn 
tat  system  required  by  this  section, 
the  Airplane  Plight  Manual  shall  eon 
tain— 

<1)  Appropriate  procedures  for— 

(I)  The  use  of  the  equipment. 

fill  Proper  flight  crew  action  with  re 
spec!  to  the  equipment; 

(ill l  Deactivating  for  planned  abnor¬ 
mal  and  emergency  conditions. 

(Iv)  inhibition  of  Mode  4  warnings 
based  on  flaps  being  In  other  than  the 
landing  configuration  If  the  system  In 
corporates  a  Mode  t  flap  warning  tnhi 
bitlon  control;  and 

<2>  An  outline  of  all  Input  sources 
that  must  be  operating 

<d)  After  September  1.  1976  (unless 
required  earlier  In  the  certificate  hold 
er's  operations  specifications),  no 
person  mss  deactivate  a  ground  pro* 
Imlty  warning  system  required  by  this 
section  except  In  accordance  with  the 
procedures  contained  In  the  Airplane 
Flight  Manual 

(e>  Whenever  a  ground  proximity 
warning  system  required  by  this  sec 
tlon  Is  deactivated  an  entry  shall  be 
made  In  the  airplane  maintenance 
record  that  Includes  the  date  and  lime 
of  deactivation 

(f)  Except  as  provided  In  paragraph 

(g)  of  this  section,  after  June  1.  1976. 
no  person  may  operate  a  large  turbine 
powered  airplane  unless  It  Is  equipped 
with  a  ground  proximity  warning-glide 
slope  deviation  alerting  system  that 
meets  the  performance  and  environ 
mental  standards  contained  In  TSO 
C92a.  or  TSO-C92b  or  Incorporates 
TSO-approved  ground  proximity 
warning  glide  slope  deviation  alerting 
equipment 

(g)  Large  turbine  powered  airplanes 
being  operated  under  the  provisions  of 
paragraph  (b>  of  this  section  may  be 
operated  until  January  1.  1977,  with¬ 
out  being  equipped  with  the  ground 
proximity  warning-glide  slope  devi¬ 
ation  alerting  system  required  by 
paragraph  (fi  of  this  section  ; 

(h)  A  certificate  holder  may  obtain 
an  extension  of  the  December  1,  1976. 
compliance  date  specified  In  para 
graph  (a)  of  this  section,  but  not 
beyond  June  1.  1976  from  the  Dlrec 
lor.  Flight  Standards  Service  If.  before 
December  1,  1976- 

(1)  It  shows  that  due  to  dreum 
stances  beyond  Its  control  It  cannot 
comply  by  that  dale,  and 

(2)  It  has  submitted  by  that  date  a 
schedule  for  compliance,  acceptable  to 
the  Director.  Indicating  that  the 
system  will  be  Installed  at  the  earliest 
practicable  date 

(I)  No  person  may  operate  a  turbojet 
powered  airplane  equipped  with  a 
system  required  by  paragraph  (f)  of 
this  section,  that  Incorporates  equip 
menl  that  meets  the  performance  and 
environmental  standards  of  TSO-C92b 
or  Is  approved  under  that  TSO,  using 
ether  than  Warning  Envelopes  1  or  2 
for  Warning  Modes  1  and  4. 


(Arndt  111114  sc  yg  1NU  Ml,  (  ]r-. 
at  amended  by  Arndt  111-122  40  TO  42)f : 
•ept  11.  1975  Arndt  121-125  40  m  50"' 
Oct  11  1975  Arndt  121-126  40  TO  jj-,', 
Nov  26  1975  And l  111-12*.  4]  TO  IV - 
Aus  19.1974) 

1 26.1467  Cackph  vote*  nearden. 

(a)  Each  cockpit  voice  recorder  re 
quired  by  the  operating  rules  of  the 
chapter  must  be  approved  and  must  tx 
Installed  so  that  II  will  record  the  fo: 
lowing 

(1)  Voice  communications  transmit 
ted  from  or  received  In  the  airplane  by 
radio 

(2)  Voice  communications  of  (Ugh- 
crewmembers  on  the  flight  deck 

(2)  Voice  communications  of  fUgtv 
crewmembers  on  the  flight  deck.  usin» 
the  airplane's  Interphone  system 

(4)  Voice  or  audio  signals  Identifying 
navigation  or  approach  aids  Intr. 
duced  Into  a  headset  or  speaker. 

(6)  Voice  communications  of  fllgh' 
crewmember*  using  the  pameng'  ■ 
loudspeaker  system.  If  there  Is  such  * 
system  and  If  the  fourth  channel  Is 
available  in  accordance  with  the  rt 
qulrements  of  paragraph  (CX4XU)  o'. 
this  section 

(b)  The  recording  requirements  of 
paragraph  (aX2>  of  this  aectlon  mus- 
be  met  by  Installing  a  oockpf.-tnounte  : 
area  microphone,  located  in  the  be? 
position  for  recording  voice  commur. 
cations  originating  at  the  first  an: 
second  pilot  stations  and  voice  oomim. 
ni cations  of  other  crewmember*  o: 
the  flight  deck  when  directed  to  thos- 
stations  The  microphone  must  be  v 
located  and.  If  necessary,  the  prearr 
ptlfler*  and  filter*  of  the  record?  • 
must  be  so  adjusted  or  supplement?-, 
that  the  Intelligibility  of  the  records: 
communications  Is  as  high  as  practice 
ble  when  recorded  under  flight  cockp 
noise  conditions  and  played  back  Rt 
petted  aural  or  visual  playback  of  thi 
record  may  be  used  In  evaluating  Inte. 
IlglbUlty. 

(c)  Each  cockpit  voice  recorder  mu? 
be  Installed  so  that  the  part  of  thi 
communication  or  audio  signals  spen 
fled  In  paragraph  (a)  of  this  sectlor 
obtained  from  each  of  the  following 
sources  Is  recorded  on  a  separate  chan 
Del 

(1)  For  the  first  channel,  from  each 
microphone,  headset  or  speaker  used 
st  the  first  pilot  station 

(2)  For  the  second  channel,  frorr 
each  microphone,  headset,  or  speaker 
used  at  the  second  pilot  station 

(I)  For  the  third  channel-from  the 
cockpit -mounted  area  microphone 

(4)  For  the  fourth  channel,  from— 

(I)  Each  microphone,  headset,  or 
speaker  used  at  the  stations  for  the 
third  and  fourth  crewmember*,  or 

(U>  If  the  stations  specified  In  par* 
graph  (CX4XI)  of  this  section  are  not 
required  or  U  the  signal  at  such  a  »ta 
lion  Is  picked  up  by  another  channel 
each  microphone  on  the  flight  deck 
that  Is  used  with  the  passenger  loud 
weaker  system.  If  Its  Signals  are  not 
picked  up  by  another  channel 


<d  Each  cockpit  voice  recorder  awt 
be  Installed  to  that— 

(1)  It  receive!  Its  electric  power  from 
Uic  but  thct  provide*  the  maximum 

reliability  for  operation  of  the  oockplt 
voice  recorder  without  Jeopardizing 
cenice  to  assenlial  or  emergency 


(S)  It  rooelvee  tu  eiectrtokl  pwer 
from  the  but  that  provide!  the  Mil 
mum  reliability  for  operation  of  the 
fiitht  recorder  without  Jeopardtrtng 
service  to  amentia!  or  ereergency 
loads. 


loads. 

(2>  There  Is  an  automatic  means  to 
simultaneously  stop  the  recorder  and 
prevent  each  erasure  feature  from 
functioning  within  10  minute*  after 
crash  Impact,  and 

(,'  i  There  la  an  aural  or  visual  means 
lor  prefluht  checking  of  the  recorder 
for  proper  operation 
tei  The  record  container  must  be  lo¬ 
cated  and  mounted  to  minimize  the 
probability  of  rupture  of  the  container 
as  s  result  of  crash  Impart  and  eonse 
quent  heat  damage  to  the  record  from 
fire  In  meeting  this  requirement,  the 
iweord  container  must  be  as  far  aft  as 
practicable,  but  may  not  be  where  aft 
mounted  engines  may  crush  the  con 
talner  during  Impact  However.  It  need 
not  be  outside  of  the  pressurized  com¬ 
partment 

<f>  If  the  oockplt  voice  recorder  has 
a  bulk  erasure  device,  the  Installation 
must  be  dealgned  to  minimize  the 
probability  of  Inadvertent  operation 
and  actuation  of  the  device  during 
crash  Impact 

tgl  Each  recorder  container  must— 

(1 )  Be  either  bright  orange  or  bright 
yellow. 

(2)  Have  reflective  tape  affixed  to  Its 
external  surface  to  facilitate  lta  loca¬ 
tion  under  water,  and 

(3)  Have  an  underwater  locating 
device,  when  required  by  the  operating 
rule*  of  this  chapter,  on  or  adjacent  to 
the  container  which  Is  secured  In  such 
manner  that  they  are  not  likely  to  be 
separated  during  crash  Impact. 

tSecs  113(a).  *01.  *03  got.  and  *0i  of  the 
Federal  AvtaUon  Act  of  1958  <89  TJAC 
1354ta).  1821.  1823.  1828  and  1828).  and  sec 
S;  of  the  Department  of  Transportation 
Act  (89  UJB.C.  1655(01) 

I  Doc  No  9068  .  29  FR  19291.  Dec  *8.  1**8. 
as  amended  by  Arndt  28-2.  20  FR  2932.  Mar 
28  1985  Arndt  25-18.  22  FR  11918.  Oct  g. 
1987  Arndt  28-81.  82  FR  2*971.  July  1*. 
1977) 

1 25.1459  Flight  recorders. 

(s)  Each  flight  recorder  required  by 
the  operating  rule*  of  this  chapter 
must  be  installed  so  that— 

(1)  It  la  supplied  with  alnpeed.  alti¬ 
tude.  and  directional  data  obtained 
from  source*  that  meet  the  accuracy 
requirements  of  M  25  1323,  25-1225. 
and  IS. 1327.  as  appropriate. 

t2)  The  vertical  acceleration  sensor 
to  rigidly  attached,  and  located  longi¬ 
tudinally  either  within  the  approved 
eenter  of  gravity  limits  of  the  airplane, 
or  at  a  distance  forward  or  aft  of  these 
limits  that  does  not  eiceed  25  percent 
of  the  airplane's  mean  aerodynamic 
chord. 


<8 )  There  Is  an  aural  or  visual  means 
lor  pre flight  checking  of  the  rocorder 
for  proper  recorder  tape  movement; 

(S)  Except  for  recorder*  powered 
solely  by  the  engine-driven  electrical 
generator  syitem.  there  It  an  automat¬ 
ic  means  to  simultaneously  stop  a  re¬ 
corder  that  has  a  data  erasure  feature 
and  prevent  each  erasure  feature  tram 
functioning,  within  10  minutes  after 
crash  Impact;  and 

(g)  There  Is  a  means  to  record  data 
from  which  the  time  of  each  radio 
transmission  either  to  or  from  ATC 
can  be  determined 

(b)  Each  nonejeetable  record  con¬ 
tainer  must  be  located  and  mounted  so 
as  to  minimi**  the  probability  of  con 
talner  rupture  resulting  from  crash 
Impact  and  subsequent  damage  to  the 
record  from  fire.  In  meeting  this  re¬ 
quirement  the  record  container  must 
be  located  as  far  aft  as  practicable,  but 
need  not  be  aft  of  the  pressurized  com 
partment,  and  may  not  be  where  aft- 
mounted  engines  may  crush  the  con¬ 
tainer  upon  Impact 
tc)  A  correlation  must  be  established 
between  the  flight  recorder  readings 
of  airspeed,  altitude,  and  heading  and 
the  corresponding  readings  (taking 
Into  account  correction  factors)  of  the 
first  pilot's  Instruments  The  correla 
tion  must  cover  the  airspeed  range 
over  which  the  airplane  it  to  be  oper 
aled.  the  range  of  altitude  to  which 
the  airplane  Is  limited,  and  360  degrees 
of  heading  Correlation  may  be  estab¬ 
lished  on  the  ground  as  appropriate. 

Id)  Each  recorder  container  must— 

(1 )  Be  either  bright  orange  or  bright 
yellow; 

(2)  Have  reflective  tape  affixed  to  lu 
externa)  surface  to  facilitate  IU  loca¬ 
tion  under  water,  and 

<))  Have  an  underwater  locating 
device,  when  required  by  the  operating 
rules  of  this  chapter,  on  or  adjacent  to 
the  container  which  Is  secured  In  such 
a  manner  that  they  are  not  likely  to 
be  separated  during  crash  Impact. 

(Secs  113(a).  *01.  *03  908.  and  *05  of  the 
Federal  AvisUon  Aci  of  1158  (8k  OA.C 
1388(a).  1821.  1823  1828.  snd  1825).  and  sec 
g(c>  of  the  Department  of  Trans portaUon 
Act  (89  U6C  1985(0)) 
tAs>dt  *8-8.  11  FR  127.  Jan  *.  1998.  as 
amended  by  Arndt  28-3*.  12  FR  12)22.  Aus 
19.  1970.  Arndt  39-27.  40  FR  2977.  Jan.  18. 
1979  Arndt  19-81.  U  FR  9*971.  July  II. 
1*771 

in.lM  Abend!  Mghi  seseedsr-WO- 
091a 

(a)  AppflooMItfy.  This  technical 
standard  order  prescribes  minimum 
performance  standards  that  aircraft 
flight  recorders  must  meet  In  order  to 
be  identified  with  the  applicable  TBO 
marking  Hew  models  of  flight  record 
an  that  are  to  be  Identified  and  that 
art  manufactured  ott  or  after  the  qf- 


(active  date  of  U>b  section  must  meet 
Hu  uifitmum  Performance  Standard 
for  Aircraft  night  Recorders  get  forth 
•t  the  end  of  this  section. 

(b)  (forking  In  addition  to  the 
markings  required  by  (37.7,  the  rating 
(nominal  voltage  and  wattage)  must 
algo  b*  marked  on  the  recorder 
te)  Data  requirements  The  manufar 
turer  must  furnish  the  Chief.  Engl 
Bearing  and  Manufacturing  Branch  (in 
the  case  of  the  Western  Region,  the 
Chief.  Aircraft  Engineering  Division). 
FUght  Standards  Division.  Federal 
Aviation  Administration.  In  the  region 
where  the  manufacturer  is  located, 
the  following  technical  data 

(1)  8tx  ooptes  of  the  manufacturer's 
operating  Instructions,  equipment 
limitations,  and  Installation  proce¬ 
dures. 

(2)  One  copy  of  the  manufacturers 
te*t  report 

Minimum  frrformanct  Standard  for 
Aircraft  rt.pM  Recorder 

1.  purpose  To  establish  — tnitrunr  require¬ 
ments  for  approved  Aircraft  FUsht  Record 
an  so  be  (wed  In  alrcraTt  primarily  for  sec) 
dent  analysis  the  operation  of  which  scat 
subject  the  recorder  to  environmental  eon 
dltlons  specified  In  section  3 

I.  Scope  This  standard  eovrrv  three  basic 
types  of  aircraft  fllsht  recorder*  for  record 
Ins  time,  air  speed  altitude,  vertical  *scel 
sraUorr.  and  beedlna  Thr  Intelligence  re 
,eelved  by  the  record  medium  can  be  bom 
l direct  and/or  remote  sensor* 

21  Definition  of  the  types  Type  I— None 
'Isciable.  Type  n— Nonriectable  restricted 
Vo  ony  location  more  than  one-hall  ol  Ihr 
wins  root  chord  from  the  main  wing  strut 
tore  through  the  fuselage  and  from  any  fuel 
tonk*.  Type  HI— EJectable  unrostrlctsd  lo 
muon 

I  Several  revet* emmts 
21  ger<  me  mental  conditions  The  follow 
gag  conditions  have  been  established  as 
design  requirement*  only  Te*ts  shall  be 
conducted  os  specified  in  sections  5.  S.  and  7 

I I. 1  TTOiA—o/vre.  When  Installed  In  at 
•oedsner  with  the  Instrument  manufactur 
nr  ,  instructions,  the  recorder  shall  function 
peer  the  range  of  ambient  temperature 
Shown  In  column  A  below  nnd  shall  not  be 
adversely  affected  by  exposure  lo  the  range 
nt  temperature  shown  tn  column  B  below 


asrmwumuw 

A 

B 

Ba^VMi(uvrr» 

tart  eootroltod  >  —  — 

UfchaftUd  inu 

NWMC 

•  UBC 

(laaptrmiurv 
■heooLroDM!) - 

HUtlC 

#  to  TOC 

g.U  Rani ditv  The  recorder  shall  fun  r 
Hoe  and  shall  not  be  adversely  affected 
when  exposed  to  any  relative  bumidlt)  b- 
the  range  from  0  tc  95  percent  at  a  tamper* 
tore  of  approximately  32'  C 
g.1  J  yibrahea.  When  installed  to  sooord 
anpe  with  the  tostrumen;  manufacturer  t 
kwtrurUont.  the  iwoorder  shall  " 

properly  and  shall  not  be  adversely  affected 
when  subjected  to  vibrations  of  the  folio* 
bw  characteristic* 
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»  1,4  Attitude  The  r reorder  shall  function 
and  total]  not  be  adversely  affsetad  when 
■Ajaeud  to  a  prossure  and  temperature 
gqnge  oggi valent  to  - 1.000  to  60.000  f»et 
gtandaid  altitude.  per  WACA  Report  Ro 
1J35  except  a*  limited  by  the  Application  of 
para«rftpb  1  1  1  The  recorder  shall  not  be 
adversely  affected  following  exposure  to  e* 
treme*  la  ambient  premurm  of  60  and  3  In 
Ha  absolute 

1.1.6  Rad vo  interference.  The  recorder 
ahall  not  be  the  source  of  objectionable  In 
tcrference.  under  operating  oondlUom  at 
any  frequencies  used  on  aircraft,  either  by 
radiation  or  feedback  in  electronic  equip 
■lent  bMtalled  to  the  aame  aircraft  as  the 
recorder.  _ 

116  Rapneftc  effect  The  magnetic  effect 
■f  the  recorder  ahaU  not  adversely  affect 
the  operation  of  the  other  Instrument*  In 
■tailed  to  the  tame  aircraft 
A  Detail  requirement* 

Cl  Recording  modtum.  The  reoord 
■tedium  shall  oonform  to  the  following  re¬ 
quirements 

a  The  recording  medium  of  recorders  em 
Ploying  mechanical  Inscribed  marling*  shall 
advance  at  a  rate  of  not  less  than  6  inches 
per  hour,  and  that  of  recorder*  employing 
other  mean*  of  recording  shall  advance  at  a 
rate  sufficient  to  permit  resolution  within 
the  accuracy  prescribed  to  section  4  3 

b.  The  recording  medium  shall  provide  a 
recording  of  the  required  data  for  At  least 
the  total  elapsed  operating  time  of  a  flight 
for  which  the  aircraft  might  be  used 


e.  The  recording  medium  shall  not  be  «uh 
Jsct  to  deterioration  or  distortion  of  the  re¬ 
corded  data  within  the  limits  mwcified 
hereto. 

4.2  Recording  infercoJj  and  range* 

a  Time  The  time  lapse  shall  be  recorded 
at  Interval*  of  not  more  than  1  minute 

b  Pressure  altitude  -1.000  to  60,000  feet 
of  standard  atmosphere  pressures,  and  shall 
be  recorded  at  Intervals  of  not  more  than 
one  second 

c.  Vertical  acceleration.  4-6  to  - *«  and 
■hall  be  recorded  at  interval'  of  not  more 
than  *•  of  1  second,  or  at  Interval*  of  I 
second  In  which  peak  accelerations  are  re¬ 
corded. 

d.  Air  speed.  100  to  450  knots  IAS,  and 
■hall  be  recorded  at  Interval*  of  not  more 
than  one  second 

«.  Heading  660  degrees  azimuth,  and  shall 
be  recorded  at  intervals  of  not  more  than 
one  second 

4i  Record  resolution  The  reoord  resolu¬ 
tion  «Haii  be  such  that  the  data  can  be  ana 
lysed  with  the  accuracy  specified  In  section 
A 

4.4  Record  protection  The  recorder  shall 
be  of  each  design  that  the  recorded  data  will 
be  protected  against  damage  by  fire.  Impact, 
and  water  within  the  limits  specified  hereto. 

4i  Pressure  • Ihtude.  The  terms  of  pres¬ 
sure  altitude  shall  conform  to  tables  I  and 

n. 

At  dir  speed.  The  Urns  of  air  R>sed  shall 
oonform  to  (able  'll 

AY  Power  ©snafuma  AD  units  shall  prop 
srty  function  with  *10  percent  to  -10  per 
sent  variation  to  DC  voltage  and/or  a  10 
per eit  variation  to  ax.  voltage  and  ±6  per 
•sat  to  frequency,  provided  the  it  voltage 
sod  frequency  vary  to  the  same  dntom. 


The  recorder  toxall  not  be  tomsnrl  when 
subjected  to  lower  voltages 

Al  Power  malfunction  indication  A 
mean*  shall  be  provided  (or  to  dice  ling  when 
adequate  power  t*  not  being  received  by  the 
recorder  for  proper  operation 

4.6  Antomaftr  ejection.  The  automatic 
ejection  provision  of  Type  III  recorder*,  to 
eluding  the  structure  bolding  the  ejectablr 
portion,  shall  be  capable  of  operating  when 
subjected  to  Inertia  load*  corresponding  to 
sn  acceleration  of  6gi  acting  to  any  dlrsc 
Uon 

6  Test  conditions. 

6.1  Ahnoeptortc  conditions  Uni  eat  other¬ 
wise  specified  all  uvu  required  by  this 
standard  shall  be  conducted  at  an  atmoa 
phene  pressure  of  approximately  16  62 
inches  of  mercury  and  at  an  ambient  tem 
pe nature  of  approximately  35*  C  When 
Lesu  are  conducted  with  the  atmospheric 
pressure  or  the  temperature  substantially 
different  from  these  values,  allowance  shall 
be  made  for  the  variation  tram  the  spadTiod 
esodi  lions 

IJ  lUrsftoi  (go  toslwiar  friction) 
Unlaw  otherwise  mmdflsd  all  testa  for  per 
formanoe  may  be  made  with  the  recorder 
subjected  to  a  vibration  of  6.002  to  0.006 
toch  double  amplitude  at  a  frequency  of 
1.600  to  3.000  cycles  per  minute  The  term 
double  Amplitude  as  used  herein  todlcaias 
total  displacement  from  positive  maximum 
to  negative 

6.3  Vibration  equipment  Vibration  equip¬ 
ment  shall  be  used  which  will  provide  fre¬ 
quencies  and  amplitudes  consistent  with  the 
requirement*  of  section  3.1.3  with  the  fol¬ 
lowing  characteristics 

6.3.1  Linear  notion  otbratton.  Vibration 
equipment  for  testing  airframe  structure- 
mounted  recorder*  of  portion*  thereof  shall 
be  such  a*  to  allpw  vibration  to  be  applied 
along  each  of  three  mutually  perpendicular 
axes  of  the  Iasi  specimen. 

6  3  2  Circular  motion  vibration  Vibration 
equipment  for  testing  shock  mounted  re¬ 
corder*  of  portion*  thereof  shall  be  such 
that  a  point  <m  the  case  will  describe,  to  a 
plane  inclined  4$  degrees  to  the  horizontal 
plane,  a  circle  the  diameter  of  which  la 
equal  to  the  double  amplitude. 

6  4  Position  All  test*  shall  be  conducted 
with  the  recorder  mounted  In  Its  norma)  op¬ 
erating  position. 

6.6  Test  voltage  All  test*  for  performance 
shall  be  conducted  at  the  voltage  rating  rec¬ 
ommended  by  the  manufacturer 

6.6  l*o wer  condition*.  All  tests  for  ptr- 
formanoe  shall  be  conducted  at  the  power 
voting  recommended  by  the  manufacturer. 

A  Allowable  record  error*. 

f.l  Altitude  record  error  The  recorder 
•hall  be  tested  for  allowable  error  at  the 
tost  point*  specified  to  table  I  on  decreasing 
and  Increasing  pressure  The  rate  of  change 
In  pressure  during  this  test  shall  not  be  Ism 
than  3,000  feet  per  minute  On  decreasing 
pressure,  the  pressure  shall  be  brought 
down  to.  but  shall  not  exceed,  the  specified 
last  point  On  increasing  pressure,  the  pres¬ 
sure  shall  be  brought  up  to.  but  shall  not 
exceed,  the  ^edfied  last  point.  Within  1 
minute  after  applying  the  specified  pres¬ 
sure.  the  error  In  the  record  shall  not 
sacred  the  tolerance  values  tod  Ira  tart  to 
table  I  for  each  tost  point 

IJ  Acceleration  record  error  The  accel¬ 
eration  error  shall  not  exceed  plus  or  minus 
6.3G  to  a  stabilised  condition,  and  the  total 
error  to  following  s  single,  triangular,  aoosi- 
•ration  pulse  of  ooe-hal/  second  duration  or 
Waaler,  shall  be  no  more  than  10  percent  of 
the  acceleration.  (An  analytical  evaluation 
Iseanoldersd  acceptable.) 


61  Time  ecale  record  error.  TV  time  laps? 
tow  shall  not  exceed  plus  or  minus  1.6  per 
emit  during  an  A  hour  period 
•  4  Air  speed  record  error  Ibt  recorder 
tokall  be  tasted  for  allowable  error  at  the 
tom  potato  RMCtfied  to  table  ED  on  tocrea* 
tog  and  decreasing  speed*  The  allovsb.* 
error  shall  not  exceed  the  toleranoe  value 
gpedfied  to  table  Ill 

6.6  Readme  record  error  The  beading 
record  error  shall  Dot  exceed  plus  or  min  a; 
6  degrees  when  measured  at  16  degree  toie* 

rto  over  660  degrees  to  azimuth  This  error 
the  difference  between  the  sensor  and  the 
Pboorder 

7.  Performance  toft*  H>e  following  tarn* 
to  addition  to  any  other*  deemed  nrre—  . 
by  the  manufacturer,  shall  be  the  basu  tor 
Arte  raining  compliance  with  the  perform 
■nee  requirements  of  thi*  standard 

7.1  Room  Imprs^fi  The  recorder  aha! 
be  tasted  at  room  temperature  to  determi~* 
compliance  with  the  requirement*  node 
Section  6 

IJ  Low  temperature.  The  recorder  ihi 
be  subjected  to  an  ambient  temperature  o' 
mini, a  66*  C  for  6  hour*  and  while  sUL  ex 
posed  to  thi*  temperature  It  ohali  be  taste; 
io  determine  compliance  with  the  roQUire 
gaent*  under  section  6 

7J  High  temperature  The  recorder  aha 
be  subjected  to  an  ambient  temperature  o' 
§0*  C  for  6  hour*  and  while  still  exposed  u 
thi*  temperature  It  shall  be  tested  to  dele- 
mine  compliance  with  the  room  temper* 
hire  accuracies  under  section  g 

7.4  Extreme  temperature  exposure  The  re 
•order,  after  exposure  to  an  ambient  ter 
per* turf  of  70*  C  tor  34  hour*  followed  t 
■xposure  to  -65'  C  for  34  hour*  folio**. 
Immediately  by  exposure  to  room  temper 
lure  for  not  more  than  3  hour*.  ahaU  or 
the  v*  .  uirement*  of  section  7.1  There  aha. 
be  bv  .▼tdenee  of  damage  as  a  result  of  ex 
Rosure  to  the  extreme  temperature* 
f.fl  H st terra u  Not  more  than  16  minute 
after  the  altitude  sensor  has  been  first  »-k 
farted  to  the  pressure  corresponding  U 
Standard  altitude  Of  6O.0OC  feel,  the  pro¬ 
cure  shall  be  Increased  al  a  rati  corresponr 
tog  to  a  decrease  to  altitude  of  not  lea*  tha- 
6,000  feet  per  minute  until  the  pressure  cc- 
tosponding  to  66.000  la  reached  Wahls  1 
second*  the  error  shall  not  exceed  the  rocr 
temperature  error  at  this  test  point  b>  me 
than  100  feet  The  altitude  sensor  ahs 
fomair  at  this  pressure  for  not  more  th*. 
16  minutes  before  the  test  to  determ:- 
•omplianor  with  table  n  Is  made  afw 
which  the  pressure  shall  be  further  lr 
creased  at  the  above  rate  until  the  pres.*  -  ’ 
corresponding  to  60.000  feel  Is  reached  Tr  • 
altitude  sensor  shall  remain  at  thi*  pres*..’ 
for  not  more  than  10  minutes  before  u 
lest  to  determine  compliance  with  tab  if  I!  i- 
made  The  premure  shall  be  further  Lr 
creased  at  the  above  rote  until  atm  asp  her, 
premure  Is  reached 

V.6  After  effect  Not  more  than  6  minute 
■Iter  the  completion  of  the  hysteresl*  ter 
the  altitude  record  shall  have  returned  u 
Rs  original  recording  corrected  for  or. 
change  In  atmospheric  promurc.  within  th 
toleranoe  shown  to  table  II 

7.7  Vibration 

7.7.1  Resonance.  The  recorder,  while  op* 
■ting  stall  be  subjected  to  s  remnant  f- 
Ruency  survey  of  the  appropriate  ror* 
specified  In  portion  1.1.3  to  order  to  deu 
mine  If  there  exist*  any  resonant  frequt: 
ciss  of  the  parts  The  amplitude  used  m* 
be  any  convenient  value  that  does  »> 
exceed  the  maximum  double  amplitude  or 
the  acceleration  specified  to  se 

toon  3  .14 
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T**-«  D-^unm  Twf  Ti 


Tbr  rwoorbe  «»g£  thee  hr  ■AJi.u.l  tc  * 
Aruioc  el  U»  epbrapletr  unrnm 
feubl*  amplitude  ar  miTtmun:  aooticrauor 
qpadf^d  to  —ctiati  1.1  J  at  U*  i  —  mum'  frr 
guvncj  for  a  period  of  2  hour  to  *ach  aru  or 
Ttl*-  rtrrula.*  mouor  tfbraUon.  whichever  a 
applicable  Wher  more  thar  ant  iwin.n 
frequency  U  encountered  with  vlbraiior.  ap- 
ptod  along  anj  ooe  uk  a  torn  period  mi} 
be  accomplished  at  the  mat4,  a evere  r«c> 
Dane*.  or  Lhr  period  maj  be  dmded  unoot 
the  raaonxrr  frequencies-  whicheve*  aha! 
be  considered  me**,  likely  to  produce  failure 
The  t«r.  period  ahai:  hot  be  lam  thar.  one 
half  hour  at  any  raaonani  mode  Wher.  rmo 
nant  frequence*  are  hoi  apparent  within 
the  specified  frequency  range  L he  recorder 
OhaU  be  vibrated  for  2  boon  in  accordance 
with  the  vibration  raquiremenu  of  aecuor. 
1.1.2  at  the  maximum  double  amplitude  and 
the  frequency  to  provide  the  maximum  sc 
uelerauon 

1.1.2  CVcitap  The  reorder  while  ope  nut 
hi  ahai:  be  lasted  with  the  frequency 
cycled  between  Umiti  apedlitxS  to  aecuor 
11  >  In  lft- minute  cycle*  for  a  period  of  1 
hour  to  each  axis  at  an  applied  double  am 
plltude  apecif.ed  in  aeciion  2  1J  or  ar.  acce. 
wuoc  specified  tn  aecuon  1  1.2.  whichever 
h  the  limiting  value  After  the  oompleuor. 
of  thu  vibration  teat  n c  damage  shall  be 
evident  and  the  recorder  shall  meet  the  re- 
Oulremenu  of  section  ft 

*  I*  Humutiti  wale-  impact,  penetration 
rmuUincx.  »tatic  cnuK  sad  flrt  protection 
hati  The  humidity  Impart.  penetraUor.  re- 
«1«  -anc*  static  muh  and  fire  protecuor. 
U»u  shall  be  made  In  the  following  se¬ 
quence  on  the  aame  raoorder  without  the 
heed  for  re  pain 

1A 1  Humxditi  The  raoorder  ahaU  be 
mounted  In  a  chamber  maintained  at  a  tem 
perature  of  10c  T  C  and  a  relative  humid 
Hy  of  05  ±5  percent  for  a  period  of  •  hours 
After  this  period  the  heat  ahould  be  abut 
off  and  the  recorder  ebou)<3  be  allowed  U> 
bool  for  a  period  of  IS  bourn  to  lhi»  atmc* 
pbere  to  which  the  humidity  rU»  to  IOC 
percent  as  the  temperature  decrease*  to  not 
more  than  M  C  This  complete  cycle  ahould 
be  conducted  fifteen  (IS'  Uxoea  Immediate 
Kf  after  cycling  the  raoorder  shall  to  sub- 
leetad  to  Use  Record  tnroe  Tasu  of  — 

1A4  Impact  The  toleiUgcooe  on  the 
record  medium  shall  be  capable  of  being 
analmd  after  the  recorder  has  been  sub¬ 
jected  to  the  following  impact  shock  Types 
I  and  13— Hal?  sine  wave  impact  shocks  ap¬ 
plied  to  each  of  the  three  main  orthogonal 
axes  and  having  s  peak  acceleration  ■ 
tude  of  1.000  g  with  a  time  duration  of  at 
least  5  milliseconds  Type  III— Acceleration 
not  lem  than  the  shocks  developed  on  eon 
tact  with  s  hortaontaJ  rock  surface,  oonaid 
•ring  the  direction  of  ejection  and  any  pro¬ 
visions  for  alleviation  of  shock  With  regard 
U>  the  former,  the  aircraft  shall  be  assumed 
U>  be  tilted  at  least  30  degrees  from  borbon 
KaJ  In  the  most  critical  direction. 

1-i  2  Penetration  resuamce  f Type  land  II 
recorder*  only)  The  Intelligence  on  the 
fwoortf  medium  shall  be  capable  of  being 
analysed  after  the  recorder  has  been  sub¬ 
jected  to  an  Impart  force  equal  to  a  500- 
pound  stee!  bar  which  is  dropped  from  a 
height  of  10  feet  to  strike  each  tide  of  the 
enclosure  is  the  non  critical  plane  The 
point  of  contact  of  the  bar  shall  have  an 
area  that  is  do  greater  than  0.06  square 
Inches  The  longitudinal  **<«  of  the  bar 
ahall  be  vertical  ai  the  time  of  Impact  Not* 
The  objective  of  this  test  Is  to  achieve  pro¬ 
tection  of  the  record  medium  from  pcsMlble 
caused  by  airframe  structural  a»»wr. 
bers  striking  the  raoorder  case  during  crash 
Impact 


TA«  *Ut%c  eras*  try*  I  sad  II  rmoorlm 
•aiyj  The  toteliigenor  m  the  rmcort 
■Man  shal  to  capable  of  being  ^*1^^ 
after  the  rvcortje-  has  beer,  subjected  u  • 
maiK  CT-uah  foror  of  I.OOC  penny*  applied 
oommuouaiy  but  ooi  simultaneous:}  to 
aach  of  the  three  main  orubognnaJ  aim  for 
a  lev.  period  of  ft  minutes 
7  I  5  Pxrr  prelection.  The  record  medium 
ahaL  remair.  Intact  sc  thai  the  intelligent* 
car  be  analjted  after  lhr  recorder  is  ex 
posed  to  flame*  of  HOC  C  enveloping  a: 
lear.  60  percent  of  the  ouUDde  area  of  lhr 
case  for  the  following  periods  of  ume  Type 
I— SO  minute*  Type  D-lft  minutes.  Type 
HI— 1.6  minute* 

7  J  ft  Vote*  protection  The  Intelligence  oc 
the  record  medium  ahai:  be  capabif  of  re¬ 
maining  permanen:  and  reproducible  after 
the  record  medium  has  been  immersed  in 
seawater  for  26  hour* 

7.9  Pvnticn  error  The  recorder  ahall  meet 
the  following  requirements  wher.  turned 
from  its  normal  operating  position  through 
b0  forward  and  back,  and  left  and  rvg;. . 
where  applicable 
a  Tune  6ect»or,  6  3 
b  Altitude  Section  6  1.  ex  or  pc  lh*i 
tolerance  may  be  Increased  by  St  fscL 
c  Acceleration  Section  12 
A  Air  gaed  Secuoo  •  \ 
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ft.  II !*bnr  AacOoc  M 

1.10  Dttttctnc.  Tbe  kTnlr-mr  MmC  br 

■ubiectnj  u  *  dtclmrv  ter  vitb  kc  RM£ 

*oliM<  u  •  oocnmrrcik.  trmueor;  kpplieC 

for  b  period  of  t  meoaifc.  equlveleot  to  fi«r 
Una  Dormkl  dmli  ooereUof  eolteet 
except  where  circuit!  Iztdude  ooenponenu 
for  which  euch  x  ter  would  be  ineppropn 
etc  the  ter.  rolltir  then  be  l.U  tlma 
Dormxi  circuit  operxun*  rolteee  The  tneu 
utloe  roeireoce  ehxl  hot  be  leee  thee  *0 
merohnt!  el  the:  relief' 

1.11  Automatic  ore  Ivor  meaiu  The  euu> 
meuc  efectioc  mceru  for  Trpe  tn  rwoorden 
eheL  be  teeted  to  demonrreie  thet  It  W  cm. 
peril'  of  e)cctlhf  the  recorder  from  iu 
mouhUnf  whtc  eubjected  to  forwerd  ecUot 
tnertte  loedi  of  If  I  to  If  i 

•.0  itecordcr  color  The  exterior  xurfecr  of 
the  recorder  mur  be  flnlehed  to  either  e 
bn«M  oreixe  or  e  brUht  yellow  oolor 
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ir.lM  Ore*  ewice  reewrder— 1 TSC'-O 
(•>  Applicability  fl)  Mlrtlmurr  p> 
formencr  xtenderdt  ert  hereb>  exu 
Bxhed  for  cockpit  eolce  recorder:  f 
U*r  on  Dulled  Butei  Uvll  *lirre‘ 
Hem  mode  lx  of  cockpit  wolce  record-  - 
mkn uf enured  for  uee  on  dvll  el-r-r. 
or.  or  Kfter  September  3.  l»fr<  e- 
meet  the  ytmnde-'ds  xpecLfied  tr.  Ft 
hi  Avtetlon  Admfnixtrk'.ior.  Blench 
“Minimum  Perfortnence  Svendera 
Cockpit  Volet  Recorders  "  deter  h 
wember  1.  1963.'  end  Federe:  A 0 
Admlnlxtretlor.  document  enLto 
“Enrtronmenu:  Text  Procedurer  I. 
Alrbomr  Kectronir  Eflulpmtr 
Auruxt  31.  1963. '  except  u  protldec  . 
pAr»«r»ph  (aX3)  of  thlx  xecuor. 

(3)  Pedend  AvUtlor  Admlnlxtrxt 
document,  "Ent-lronmenut;  Tex'  P. 
oedurex  for  Airborne  Electronic  £c_ 
ment."  outllnex  eenout  text  prt- 
dure*  which  define  the  envtro nicer 
extremes  over  wajcb  the  equips-." 
■hell  be  designed  to  operxte  Bom*  u 
procedure*  heve  cetegorlex  eeteblu'  ■ 
end  lone  do  not  Where  cetegonet  x 
•etxblixhed.  oni>  equipment  «.- 
quklifies  under  one  or  more  of  the  f 
lowing  axtegortei  ex  specified  tr.  f 
PAA  document  lx  eleglble  for  *p; - 
el  under  this  order 
Cl)  Temperwture  Altitude  Text— C* 
etoiie*  A.  B  C.  or  D. 

<tl)  Vibrwtlon  Text- Cetegorlex  A,  1 
C  D.  E.  or  P. 

(til)  Audio- Frequency  Mernetlc  Pit 
Bueceptlbliltf  Text— C* teg cn ex  A  o-  ) 
tte)  Redlo-Frequencr  Bueceptlb.: 
Ter.  — Cetcgo-)  a.  end 
(1)  bmxxion  of  Spurious  Redio-Pr- 
eueno  fcierrr  Ter.— Oetegon  A 


airesearch  manufacturing  company 


81-17693 
Page  F-8 


I  >lii  Flight  recorder.  ami  eeekph  »eec» 


(fe>  Marlnne  (1>  Is  addition  10  the 
Warklap  specified  fc  |J"7idi.  thr 
AQUipmenl  shai  be  marked  to  todies  u 
the  ontlroamental  extremes  over 
which  It  ha.'  beer,  designed  to  operate 
There  ore  (lx  environmental  test  pro 
oedure*  outlined  In  the  FAA  doco 
ment.  "Environments’  Tes:  Proct 
Aires  for  Airborne  Electronic  Equir 
Natal,"  which  hive  categories  esut 
fished  These  shsll  be  Identified  on  the 
•ameplate  by  the  words  "ecvtronmen 
Aal  oaleg  orles'  or,  as  abbreviated 
"Env  Cst "  followed  by  (lx  letters 
Which  td-rnttfy  the  categories  unde* 
Which  the  equipment  Is  Qualified 
Aesdmf  fro rr  left  to  right,  the  eategr. 
rj  designations  shall  appear  on  the 
Nameplate  In  the  following  order  sc 
that  they  may  be  readily  identified 
Ci)  Temperature- Altitude  Category. 

(II)  Vibration  Test  Category; 

(III)  Audio- Frequency  Magnetic  Field 
Susceptibility  Test  Category. 

(fr I  Radio- Frequency  Susceptibility 
Test  Category; 

(t)  Emission  of  Spurious  Radio-Fre¬ 
quency  Energy  Ter.  Category;  and 
(wl>  Explosion  Test 
(2)  Equipment  which  meets  the  ex¬ 
plosion  test  requirement  shall  be  lden 
tilled  by  the  letter  “E '.  Equipment 
Which  does  Dot  meet  the  explosion 
test  requirement  shall  be  Identified  by 
the  letter  “X".  A  typical  nameplate 
Identification  would  be  as  follows;  Env. 
Cat  D  BAA  AX 

(t)  In  some  cases  such  as  under  the 
Temperature-Altitude  Test  Category. 
•  manufacturer  may  wish  to  substantl 
Ate  his  equipment  under  two  catego 
rles  In  this  case,  the  nameplate  shall 
he  marked  with  both  categories  In  the 
apace  designated  for  that  category  by 
placing  one  letter  above  the  other  In 
khe  following  manner 

A 

Env  Cat.  D  BAAAX 
<e>  Onto  requirements.  In  accordance 
the  with  the  provisions  of  t  37.5.  the 
manufacturer  shall  furnish  to  the 
Chief.  Engineering  and  Manufacturing 
Branch.  Flight  Standards  Division. 
Federal  Aviation  Administration.  In 
the  region  in  which  the  manufacturer 
ti  located  the  following  technical  data 
<t>  8U  copies  of  the  manufacturers 
operating  Instructions  and  equipment 
limitations. 

(1)  Six  copies  of  the  Installation  pro¬ 
cedures  with  applicable  achematic 
drawings,  wiring  diagrams,  and  specif; 
cations,  indicating  any  limitations,  re- 
OLrtcUons.  or  other  conditions  pertl 
Went  to  installation,  and 
O)  One  copy  of  the  manufacturer's 
led  report 

nxc  no  soas  xs  fr  tain.  No*  it.  im< 
as  amended  by  Doc  No  HK  U  FN  DU 
Apr  U.  1ST!) 


recorders. 

No  holder  of  an  air  carrier  or  eom 
merclal  operator  certificate  may  cor 
duct  any  operation  under  thu  pan 
with  an  aircraft  listed  in  his  oper 
ations  specifications  or  current  list  of 
aircraft  used  in  air  transportation 
unless  that  aircraft  complies  with  anj 
applicable  flight  recorder  and  eockpr. 
voice  recorder  requirements  of  thr 
part  under  which  Its  certificate  is 
Issued  except  that  It  may- 
fa)  Ferry  an  aircraft  with  an  tnoper 
atlve  flight  recorder  or  cockpit  voice 
recorder  from  a  place  where  repair  or 
replacement  cannot  be  made  to  a  place 
where  they  can  be  made 
(b)  Continue  a  flight  as  originally 
planned  If  the  flight  recorder  or  cock 
pit  voice  recorder  becomes  inoperative 
after  the  aircraft  has  taken  off. 

(c >  Conduct  an  airworthiness  flight 
test,  during  whlleh  the  flight  recorder 
or  cockpit  voice  recorder  it  turned  off 
to  test  It  or  to  test  any  comm  uni  ca 
lions  nr  electrical  equipment  Installed 
in  the  aircraft,  or 

<d)  Ferry  a  newly  acquired  aircraft 
from  the  place  where  possession  of  It 
was  taken  to  a  place  where  the  flight 
recorder  or  cockpit  voice  recorder  Is  to 
be  installed 

MS  U.SC  1«U  1424  < 

lAmdi  ei-s  »  FR  Seen  July  l  less  at 
amended  by  Amdi  f  1-71.  IS  FR  7M3  May 

e.  teio) 


•Copies  may  be  obtained  upon  requmt  ad 
Brewed  to  Iht  Federal  Avtsuor  Admirustrv 
Hen.  Aueouac  NO-410  Washington  D  C 

Assay 
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VISIT  REPORTS 

A  list  of  the  visit  reports  used  in  this  study  is  as  follows: 

(a)  Wright  Patterson  Air  Force  Base  and  Fairchild  Republic  Co.,  re.  A-10 

(b)  Wright  Pat ferson  Air  Force  Base,  re.  F-15 

(c)  Wright  Patterson  Air  Force  Base,  re.  F— 16  (included  as  Appendix  B) 

(d)  Naval  Air  Test  Centre  -  Patuxent  River  (2  visits) 

(e)  Norton  Air  Force  Base 

(f)  NAVAIR  Systems  Command 

(g)  NTSB  Washington 

(h)  Report  of  actions  and  progress  16  Oct  to  1  Nov  1980 

(i)  United  Kingdom  Accident  Investigation  Branch,  Farnborough,  U.K. 

(j)  British  Airways  -  Engineering,  Heathron 

(k)  Royal  Aircraft  Establishment  Structures  Dept.,  Farnborough,  U.K. 

(l)  EASAMS  Ltd.,  Camber  I y,  U.K. 

(m)  U.K.  Civil  Aviation  Authority,  Red  hill,  U.K. 

(n)  U.K.  Ministry  of  Defense,  Inspectorate  of  Flight  Safety,  London 
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T:.o  ?>.  .ovi...-  !’•  forr.f  tion  rer*  rdinf  the  A10  (Pcirchiid  Republic) 
sircrrft  hes  been  ebtfined  durinp  virits  rnd  diacuer  tcne  witn  the 
foil owi up  peracnne 1 . 


Vi'rirr.t  l''-.tterson  Personnel  for  AiO  ie»  -  ao  -  *© 


Tnorcse  iJicIcaun 
D-.ve  i  orr>bn 
Robert  Tyndele 


inrtrur.entation 

Pii/rht  Reipri  and  Aerodyne Tice 

W  ft  W  tf 


P i  ire  hi 1 3  Keruh : ic 


Howard  Dt.v iee 
Don  Urndy 
Hrur/t  ;>7-rr  .lnn 
i'  umy  wirueu  cn 


lO  -  Z\~  *c> 

f^nuper  A 10  Enp 

Avionics 

Instruments 

ft 


T.ie  A  1C  t.  lrcr<-  f  t  is  f  rinf.le  sect  twin  turbe-f;  r.  o  Ire  re  ft , 
pri  neri  iv  dosipned  to  orovide  sustained  support  in  a  bt  ttle  t.ret 
ir.vdjitinr  i-r.ti  tr.n<c  end  anti  tree  he  n.i  tied  ve  hie  tee. 


It  he  e  hiph  ~i  dil  ity  et  low  ;  ire  peed  r  and  in  intended 

for  u*  e  ?t  iow  /.•  Ltitudec  \h0.*  b« » cw  DOO  ft.)  and  cor.-.voruy  errrier 
out  t  -  p  turns  t-t  300  Ktf  . 


One  three  >Ar.drc 
I'ini:  /  i  tv ionic;-’,  fro/: 
inc.ui:  .‘3v3  a  As  dote 

avionics  suitable  for 


•i  cr  so  a  ire  re.  ft  ».  Ire  Jy  dc  li  vexed  have- 
aircraft  .  umber  4}:  onwnrds  tho  A  lO  v:i'.  \ 
Due  ti/d  will  cent*  ir  conridernbly  sere  diyi 
date  recording. 


to  1 


.-.L  L  (-  ire  re  ft  ccntrin  f  stability  Aupr.entot  ior.  c-quip'ient 
ner.ufuc lured  by  G.E.  which  operetoe  on  the  elevator  rudder. 

sipne  ic  fre  rr  this  sy;  te:>  we  under  sis  nd  only  provide  del.tr 
charter  te  the  inputr  frer.  the  pi  ! ct  nr?  £tvc  •-  r  decrees  of  control . 

Personnel  at  iVl-AFn  indiccted  that  future  a!  re  re.  ft  would  be 
fitted  with  Infra  bed  control  i  ystern  frer.  which  many  cf  the  required 
signals  could  be  obtained. 


Dincurrionn  with  Fairchild  Republic  indicate  that  this  IR 
system.  wan  cn.y  JiKely  to  be  introduced  if  a  two-seater  version  of 
the  AIO  wuc  produced  am.  thou  only  would  be  fitted  to  this  version* 

The  latter  aircraft  will  contain  an  inertial  Novice  tion  bys.ter 
which  will  provide  rorr.e  of  the  required  parameters  for  the  dnip'obnn 
of  thin  study  on  the  data  bus. 


One  out  of  five  aircraft 
vyrter.  instt  lied.  Dettiis  cf 


hi.::  e  utructurt.J.  Intc-yrj  ty  Fo.uitcrir.*' 
thin  syr  ter/1  re  attached.  (Course )  . 
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.\  -.irnttei  number  of  ft  will  elso  have  a  Turbine  Health 

e arise  irunitorinp:  system  luniiufuctured  by  hcrthrop.  It  is  understood 
Aircteercii  for  this  and  hi  ve  full  details  cf  the  clynnl 

nvai-U-bility.  Cpt.  Caputto  at  Kelly  AFB  is  recp onsibie  "for  fair 

pro^rnrj;  t . 

Sirii:.  r  aysteis  are  on  board  the  name  pcrcer.tefe  of  P’5  end 
Fib  aircraft.  1'cr  the  FI  5  thece  rre  ri  nufi  ctured  by  Jorthrop. 

»V FA PB  indict  ted  that  r.  stud y  w<  r  be-inr  carried  out  with  6  view 
to  res  -r.cinf  r.cct  of  the  cockpit  instrurcr.tr  with  c  CRT  dirp_ry. 

Beth  M  end  F. Republic  stressed  t  need  on  any  crc eh  recorder 
to  record  riett  iiB  of  the-  status.  cf  tlie  Rioter  crr.ttcn  indications. 

t-  pcs :  fiue  area  ic  available  between  the  enfinen  for  fitment 
of  r  rcccrdi :v  ty.  ter* 

i»t  both  routines  it  woe  indict  ted  that  the  nfinter.rr.ee  rccordij'r i[ 
furttio.ir:  .hoc  id  be  ircludcd  within  any  FDR.  This  i;-  :  uch  that 
tire  v  rair.ten;  r.re  v/i  il  be  carried  out  on  there  systems,.  (At 
present  b0‘  cf  flights  with  this  :  voter,  ere  cr  er  t.tor.a  J. ) . 

Details  cf  rest  of  tr.e  rlf.nr  :  r  rhea  id  be  svail*  bie  within  the 
Interlace  Ccntroi  Dcc.:r  ert  {!•,:,  -  lot-  -  t>00'i4)  end  it  ir  tfccuyht 
that  Aircret  rch  have  t.  copy. 


j  he  nir.  t:' :  for  the  ri  rcrrft  crr.tai::  up  tp  .10 170(.  1  bs .  cf 

fuel,  txjere  tanka  art  foar  filled.  Kxtcrrn]  tanka  if  fittc-d,  ct  r. 

ex  rry  up  to  11,000 :  bs  .  but  are  r.et  fear,  filled  and  arc  carried  bc’ow 

the  fuse. I afe . 

For  this  aircraft  consideration  should  be  fiver,  for  recordinr 
RF!.'  )'.d  er./’i re  tempers ture  for  the  AP1J  r. e  thi;  can  be  operated  in 

fj.ipht,  both  sipnaj-r  have  t  rtr^c  frc:.  acre  to  nr. a  vt.lt  DC. 


Heading 
Fitch  " 

Calibrated  Airspeed 
Altitude*  Course  .*  n<i  fine 
Bun.:  auric 

Roli^Ritch/Yaw  Rate  (formal 
Rot*  rate  is  up  to  POOo  per 
sec.) 

Sink  rate 

Elevator  Rudder  end  Aileron  Poe 

Any.le  of  attack 

I'orr.  .1  lead  factor 

Rudder  Pedal  r.nd  Stick  position 

Flap  position 

Speed  br>..<e 


Sync hr^ 

ft 

n 

n 

n 

not  available  but  will  be 
advised  by  Fairchild 

YeD  derived  from  altimeter 

Po  indication 

Synchro 

Analogue  DC  +10v  to  -lOv 

Tot  avails ble 

Analogue  0  -  Jv  dc 

Fitted  to  RII  side  only.  let 

me  chr.nl  cr.  I J  y.  type  ? 


* 

* 

# 


* 


linked 
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L-ndiig;  Set- 
M  ch  Lu.-'oer 
Side  Slip 

Euf'ine  Ptjr;  meter;- 

Oil  pressure 

Hydruu  .ic 

Fuel  ,v.a:;tity 

Throttle  Position 

Lo  ;.f torbur_.er  •  r  varitbso 

0i_  .’.i  :.ti  ty 

Gener*  tor  output 

Invertor 

A • P • O  «  otltuS 


two  discretes  ?t-v 

From  Hoi;  tx.f-r  Instrument  * 

let  available.  Not  pcetibie 

to  fit  transducer 

Tc  be  found  frori  Aireeenrch 

Synchro 

Two  epsteinr 

iiirgo  ttip.nal  available 
Two  transducers  available 
no;;-,  le 

Lot  available 

3  power  cyrtenn  should  also  record 
bur  P.vitchirg 
c-t;oe:»tinl  bur*  only 
avail able 


Provided  on  Hunter  C  ution  panel  ere  indication  cf  Engine  Fire 
end  once;-;  ive  temperature  warning  to.jhter  with  ether  Biennis. 

Dave  toman  who  has  beer,  involved  in  reveml  cf  the  accident 
inve:  tiuptionr-  -.ve c  '  3*- next  that  there  muter  cuuticr.  indications 
were-  the  only  onee  necessary  to  be  recorded. 


s.v.  i  '.ubi: 


>3  tf  B  detf  bu: 


her.  fitted . 
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Crash  Survlveable  Plight  Deta  Recorder  Study 

For  the  MCAIR  F  "lak aircraft , discussions  were  held  with  Bill 
Soukup  at  Wright  Patterson  AFB  on  21st  October  1980,  The  following 
information  was  obtained i- 

1*  Heading  .  1553  Data  Bus. 

2.  Pitch  attitude. •• .1553  Data  Bus. 

3.  Calibrated  Airspeed. .... .1553  Data  Bue 

4.  Altitude . .....1553  Date  Bus 

5.  n~n':  Angle ....... .1553  Data  Bus 

6.  Roll  Rate  )  Available  in  CADC  but  mty 

7.  Pitch  Rate  )  require  a  software 
3.  Yaw  Rate  )  modification 

9.  Sink  Rate . 1553  Date  Bus 

10. Eievatcr  Position. .. .Hot  on  F15*  Use  Stabilator  Position 

-6.5v  to  <f6.5volts  DC 

11.  Aileron  Position  -  20o  Synchro  Kull  at  Oo  )  20%  of 

12.  Rudder  Position  -  30o  "  "  "  "  )  A/C  only 

13* Angle  of  attack  1553  Data  Bue 

14, Kormol  load  factor  1553  Date  Bus 

15.  Rudder  ped~l  position  not  available 

xb. Stick  position/ force  Force  sensor  fitted  equipment  would 

need  Modification  to  bring  signal  out  0  -  lOv  dc 
17. Flap  Position  0  -  lOvolt  dc  (requires  checking) 

18. Speed  Brake  position  1553  Data  Bus 

IS. Landing  gear  position  1553  Date  Bus 

20. Mach  Number  1553  Data  Bus  analogue  also  available 

21. Sideslip  angle  Probably  within  IKS  but  would  require 

software  change 

22.8og/ine  RPM  H2  only  requires  checking 

23. Engine  EGT  Hot  available.  Fan  turbine  inlet  temp,  available 

Signal  type  to  be  dete#x±ned 
24  Engine  Fuel  Flow  Synchro  0  -  100000  lbs^hr. 

25.011  pressure  Synchro  adapted  WIL-T-25624C 
2b. Hydraulic  pressure  3  systems  each  has  synchro 
27. Fuel  Quantity  1553  Data  Bus 
2o. Utility  hydraulic  pressure  synchro 

29.  Throttle  position  has  been  fitted  on  test  aircraft  but  is  very 

expensive.  May  be  more  readily  available  at  engine 

30.  Afterburner  nozzle  position  synchro 
31.011  Quantity  not  available 

32. Generator  output  2  systems 
33 • Inverter  output  Hone  fitted 

34. ADC  digital  signal  available 

35.  Fire  Control  system  not  tuieiiiable 


Limit  load  warnings  are  provided  by  discrete  signals  end 
are  recommended  for  recording. 


A  space  of  5  x  5  x  16"  Is  available  under  the  left  hand 
cir  intake  which  could  be  utilized  for  fittment  of  the  system. 


It  was  recommended  that  the  ASIP  recorder  should  be 
replaced  by  the  CSFDR. 
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Visit  Report  to  Naval  Air  Test  Centre 
PATUXENT  RIVER  MARYLAND 


Department 

SYSTEMS  ENGINEERING  TEST  DIRECTORATE 

DANIEL  M.  WATTERS  U.S.  Navy  Advanced  Technology 

NORMAN  W.  BISHOP  NGL 

V.  HUGH  EDWARDS  NGL 

Date  25th  November,  1980 


Dan  Watters  is  in  charge  of  tie  advanced  technology  group 
at  NATC.  He  has  been  tasked  by  Ray  Rank  at  NAVAIR  to  produce 
statistics  of  Navy  aircraft  accidents  and  an  essential  parameter 
list  for  crash  investigation  purposes.  He  gave  us  all  the  data 
that  he  had  collected  and  promised  to  give  us  more  when  it  became 
available . 

Dan  Watters  is  currently  drawing  up  a  MIL-STD  document  for  the 
Navy.  This  MIL-STD  will  be  the  future  Navy  requirements  for  crash 
protected  FDRs. 

We  were  then  shown  the  laboratories  where  work  is  currently 
being  done  to  evaluate  a  semi  conductor  PDR  manufactured  by  Sperry 
Uni vac.  The  Hamilton  Standard  system  wes  also  under  evaluation. 

Details  of  these  two  systems  ere  in  appendix  one. 

It  was  made  absolutely  clear  to  us  by  Dan  Watters  that  all 
future  crash  recorders  will  be  of  the  deployable  type.  This  is 
because  of  the  high  number  of  over  the  water  missions  that  ere 
carried  out  by  the  Navy.  The  cost  of  recovering  an  aircraft  from 
the  sea  bed  can  be  very  expensive.  With  a  deployable  recorder  a 
decision  can  be  made  whether  or  not  to  recover  the  aircraft,  thus 
reducing  the  costs. 

The  Navy's  position  on  voice  recording  is  uncertain.  Ray  Rank 
tells  us  that  it  is  only  necersary  on  two  seater  aircraft,  while 
Dun  Watters  and  the  safety  office  would  like  to  see  it  implemented 
on  all  aircraft.  He  gave  three  reasons 

1.  A  lot  of  flying  is  done  out  of  range  of  A.T.C. 

2.  When  a  pilot  is  under  stress  he  will  normally  talk  to  himself 
or  the  aircraft  and  this  data  wouir  prove  invaluable  in 
establishing  the  cause  of  the  incident. 

3.  If  a  pilot  is  aware  that  his  voice  is  being  recorded  and  he 
experiences  any  difficulty,  if  properly  instructed,  he  may 
talk  about  the  problem. 

The  only  reason  that  a  semi  conductor  PDR  is  being  suggested 
is  from  the  reliability  aspect.  The  Navy  have  had  bad  experiences 
with  their  existing  tape  recording  systems. 
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N.W.  Bishop  end  myself  visited  Den  Watters  who  heads  the 
advanced  technology  department  of  the  Systems  Engineering  Test 
Directorate  at  the  Naval  Air  Test  Centre,  Patuxent  River.  The 
intention  of  this  meeting  was  to  introduce  us  to  what  the  Navy 
are  evaluating  in  terms  of  Crash  Data  recording. 

Since  a  P.18  aircraft  had  crashed  at  Patuxent  River  the 
previous  Friday  and  the  MSDR  had  been  recovered,  Dan  Watters 
wanted  to  know  a  little  more  about  the  system. 

Data  had  been  recovered  sucessfully  off  the  TTM.  Unfortun¬ 
ately  the  last  few  minutes  of  data  had  not  been  dumped  onto  the 
tape  and  was  lost.  This  is  inherent  in  the  design  as  the  system 
was  not  designed  as  a  crash  recorder  but  as  a  maintenance  recorder. 

He  confirmed  that  the  crash  hardened  MDRM  was  only  an  interim 
solution  to  the  crash  recorder  design  and  that  a  deployable  system 
is  necessary.  (See  visit  report  to  Ray  Rank.)  He  also  confirmed 
what  Ray  Rank  had  told  us  that  morning. 

Dan  Watters  has  been  tasked  by  Ray  Rank  to  produce  crash 
statistics  for  the  Navy  (see  enclosed  letter).  Also  he  will  be 
carrying  out  a  survey  on  the  latest  available  semi-conductor 
memories,  as  the  Sperry  Univac  system  is  not  considered  as  the 
final  solution. 

We  were  then  given  a  conducted  tour  of  the  Laboratories. 

First  we  were  shown  the  Sperry  Univac  facility.  Here  they 
were  using  existing  Conrac  DAU  and  CPUs  controlling  a  1553  data 
bus.  The  Sperry  Univac  Solid  State  Memory  is  used  for  storing 
both  audio  and  data, audio  taking  up  80%  of  the  storage.  This 
set  up  is  described  in  more  detail  in  a  Naval  Document  attached. 

We  then  moved  on  to  the  laboratories  where  they  evaluate  recording 
systems . 

A  complete  aircraft  simulator  was  used  to  evaluate  the  record¬ 
ing  systems.  The  simulator  comprised  of  a  Dual  1553  data  Highway, 
simulated  cockpit  with  flying  controls  and  controlled  by  a  number 
of  PDP11/3*  mini  computers.  The  system  could  then  be  programmed 
to  simulate  a  number  of  current  aircraft  in  the  Navy. 

The  simulator  was  flown  by  an  experienced  pilot  of  that  partic 
ular  aircraft  and  the  data  generated  used  to  evaluate  the  AIRS  and 
ULAIDS . 

While  we  were  present  the  Hamilton  Standard  AIRS  was  under 
evaluation.  We  were  shown  traces  produced  by  the  aircraft,  super 
imposed  on  this  trace  was  the  trace  produced  after  data  compression 
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By  all  accounts  the  set  up  was  impressive  and  showed  how 
much  the  Navy  are  willing  to  spend  on  crash  recording  systems. 

A  further  meeting  has  been  arrenged  for  25th  November  1980 
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Meeting  at  Norton  Air  Force  Base  with  Lt.  Col.  Robert  Sweginnis  and  Capt. 
Dennis  Dailey  AFISC/SESD  8th  December  1980. 

Report  by  N.  W.  Bishop  and  V.  A.  Edwards 

The  meeting  was  held  to  discuss  various  aspects  of  the  CSFDR  study. 

Below  are  the  issues  raised  and  relevant  comments  received. 


Engine  parameters  =  we  questioned  the  need  for  recording  each  of  the 
parameters  N2,  N  ,  EGT  and  Fuel  Flow  and  if  any  one  could  be  left  out. 

Each  is  considered  important  to  enable  determination  of  the  cause  of  failure, 
N2  provides  thrust  information,  EGT  fuel  control  data  and  Fuel  Flow,  fuel  manage¬ 
ment  problems.  Sampling  rates  to  be  adequate  to  determine  if  failure  is  due  to 
fuel  starvation.  If  EPR  is  available  this  would  also  be  very  useful. 

We  were  asked  what  our  preference  was  for  sol  id  state  memory.  We  stated 
that  no  discussion  had  been  made  but  indicated  that  we  were  considering  the 
Intel  E^ ,  They  questioned  the  write  time  for  these  devices. 

s * 

It  was  suggested  that  Nop  wheel  steering  be  monitored  in  the  form  of  a  hard 

..Sc* 

over  dionete. 

They  expressed  the  opinion  that  the  last  5  minutes  prior  to  crash  in  an 
uncompressed  state  would  have  advantages  but  to  consider  the  cost. 

Pre  take-off  data  was  considered  to  be  useful  if  not  too  costly. 

Audio  was  considered  to  be  not  cost  effective  and  they  would  prefer  to 
record  additional  parameters. 

The  parameter  recording  accuracies  should  be  such  as  to  indicate  normal 
instrument  fluctuations. 


A  constant  data  rate  with  reduced  accuracy  during  high  rates  of  change  was 
considered  acceptable  providing  the  data  was  compressed  during  p#  static 
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r '  - ' 


****** 


It  was  stated  that  for  the  crash  conditions  one  company  was  taking  an 
aircraft  dive  into  the  ground  at  ^OO  kts  making  a  10  foot  hole  with  15  feet 
of  the  aircraft  compressed. 
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memorandum 


from  !>'•  H . Bishop  and  V.H.Edwaftfs  * 

date  24th  Eovember 

reference  Keetijog  with  Ray  Ran’-:  KAVAIR  Systems  Cmd.  15th  November  1580 

A  very  cordial  meeting  wes  held  with  Ray  Rank  during  which  he 
expressed  his  views  and  expectations  with  respect  to  future  C.O.P.O.R 
■*ftd  maintainance  recorder  programs  for  the  US  I’avy.  He  also  describe 
their  attainments  during  the  A  7  maintainance  programs. 


CRASH  RECORDERS 


Ray  Rank  is  adament  that  for  aircraft  that  predominantly  fly 
over  water  a  deployable  recorder  is  required  for  crash  investigation 
purposes.  This  due  to  the  extremis  high  cost  of  recovering  an  aircref- 
or  recorder  after  a  crash.  This  recorder  must  contain  a  Crash  Positio: 
Indicator.  He  indicated  his  preference  for  the  use  of  a  deployable 
recorder  over  land  as  well,  on  the  grounds  that  an  aircraft  which 
crashes  into  the  mountains  or  forest  is  very  difficult  to  find  and 
the  C.P.I.  would  provide  a  meens  of  locating  the  crash  . 

We  questioned  the  airframe  modification  cost  for  fittment  of 
an  aerofoil  which  he  stated  were  extremljf  high. 

He  is  of  the  view  that  the  C.S.P.D.R.  storage  module  must  be 
separate  from  any  maintainance  recorder  such  as  not  to  reduce  its 
integrity. 

Por  recording  of  audio,  which  he  does  not  consider  essential 
on  single  seeter  aircraft,  his  recommendation  is  that  two  identicle 
recording  modules  should  be  utilised  one  for  voice  and  t  'e  other 
for  data. 

He  we  understand  was  one  of  the  two  sponsors  for  the  development 
of  the  Sperry  solid  state  recorder.  He  stated  that  the  objective  was 
to  have  a  solid  state  recorder  proven  and  available  to  start  in 
service  operation  in  iS86/37. 

IlAlKTAIUrCS  RECORDING 


Ray  Rank  is  obviously  one  of  the  prime  exponents  within  the 
US  Eavy  in  favour  of  maintainance  recording.  He  described  the  A  7 
maintainance  program,  which  was  set  up  to  allow  comparisons  in 
operating  cost  and  readiness.  One  half  of  a  squadron  opperates  a 
total  maintainance  policy  utilising  the  Conrec  maintenance  recording 
system  together  with  horoscopes  and  oil  analysis,  whilst  the  other 
half  uses  normal  maintenance  procedures.  In  the  early  days  of  the 
program  they  had  lots  of  problems  but  since  the  bugs  have  been 
resolved,  the  half  of  the  squedron  using  maintenance  recording  has 
consistently  more  aircraft  available  to  fly. 

Por  the  P18  maintenance  program  he  expected  at  least  as  much 
success  once  the  bugs, which  he  considered  inevitable .were  overcome. 
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Visit  Report  RTSB  lashingotn  D.C. 

Date  8th  October  1380 

Person  visited  -  Br.  Carol  Roberts 

Attended  by  N.R.  Bishop  and  V.H.  Kdwards. 

The  meeting  was  opened  by  Roman  Bishop  who  explained  to 
Dr.  Carol  Roberts  who  and  where  SSL  are  in  the  Aerospace  Industry. 

Dr.  Carol  Roberta  told  us  that  both  Hamilton  Standard  and 
Lear  Siegler  had  visited  ITSB  to  discuss  the  programme.  Lear  Sisgler 
visited  HTLB  shortly  after  the  contract  was  awarded  and  have  not  been 
back  since,  while  Hamilton  Standard  here  visited  RTSB  on  a  couple  of 

occesichi. 

Dr.  Carol  Roberts  summarised  RTSB  philosophy  on  accident 
investigation  as  well  as  changes  whe  would  like  to  see  come  about. 

In  general  these  thoughts  agreed  with  Ray  Davis's,  the  exceptions 
where  Data  Compression,  Compatebillty  of  TS0-C51A  to  military  aircraft 
and  CVRs  in  single  seat  aircraft. 

Data  Compression  would  be  acceptable  as  long  as  the  last 
5  minutes  were  vuesmprocned  and  continuously  recorded. 

The  TS0-C51A  spec,  neods  modification  in  two  arees  (1)  to 
withstand  greater  impact  velocity  (2)  shorter  but  much  hotter  fire 
survivability. 

CVR' e  according  to  Dr.  Carol  Roberts  in  a  single  seat  fighter 
aircraft  would  not  serve  an  Important  role  in  accident  investigation 
but  it  is  essential  that  time  correlation  between  detc.  or.  the  FDR 
and  the  ATC  tapes  is  maintained. 

Ve  were  then  given  a  conducted  tour  of  the  data  replay 
facilities  and  introduced  to  Paul  Turner. 

Paul  Turner  is  in  charge  of  the  CVR  replay  facility  end  was 
surprised  to  find  out  that  we  manufactured  a  CVR.  He  said  that  he 
was  willing  to  help  Is  any  way  with  tape  handling  problems  if  a 
similar  situation  .ike  that  of  the  P18  happened  in  the  U.S. 

Dr.  Carol  Roberta  then  gave  us  various  pepers  and  documents 
relating  to  commercial  aircraft. 
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Crash  Survivable  flight  Data  Recorder  (CS7DR)  study 

Raport  of  actions  and  progress  16 th  Octobar  to  lat  Bovember  by 
E. I. Bishop  and  Hugh  Sdwarda. 

Va  visited  Bright  Fattaraon  APB  20th  and  2Lht  Octobar.  Information 
relating  to  the  _?16  waa  obtained  from  Belvin  Laraaa  .Paul  Anders  and 
Lt.  Stephen  Haupt,  details  of  this- are  in- a  separate  raport  passed  to 
•  Rich  Bullock.  A  meeting  waa  hald  with  Thomas  Dickoan  to  obtain  informatlo 
with  regard  to  the  A10.  Aseparate  report  passed  to  Kick  Bullock  covers 
the  infirr-^tlon  obtained  during  this  meeting  and  a  meeting  heldwith  - 
engineers  at  Fairchild  Republickon  23rd  October.  Be  also-  met  with  the 
personnel  responsible  for  the  structural  integrity  program  for- all  three 
aircraft  being  considered  andwlth  Bill  Soukup  who  la  responsible  for 
the  f 15  instrumentation. 


Robert  Semin  the  engineer  responsible  for  the  CSFDR  program  accomp¬ 
anied  us  during  all  the  meetings  except  that  with  Paul  Anders  and  Lt. 
Stephen  Haupt  when  Bad.  Schopf  was  with  ua. 

On  29th  October  we  visited  HCAIR  at  St.  Louis  to  try  and  finalize 
the  details  of  the  signal  sources  on  the  P15  and  to  determine  if  a 
suitable  location  for  fittment  of  a- system  were  evailable.  The  meeting 
was  set  up  and  arranged  by  Prank  tynn  the  local  Gerrett  area  repreaentati' 
who  attended  with  us .  The ■ engineers  headed  by  Michael  Inman  stated  that 
they  were  only  prepared  to  talk  with  us  in  general  terras,  if  we  wished 
to  obtainamny- specific  information  we  would  have  to  place  a  contract  to 
obtain  that  information. 


-  -  Be  understood  that  Hamilton  Standard  had  placed  suchan  contract  with 
them  and  that  they  felt  moraly  eommited  to  treat  other  companies  the 
same  way.  All  of  the  engineers  present  expressed  adesire  to  have  a  crash 
recording  system  fitted  to  the  aircraft. 


Be  have  spoken  with  RASA  Langly  and  a  Dr  R.G. Thomson  of  the  Impact 
dynamics  research  facility  provided  us  with  the  results  of  calculations 
for  the  maximum  shock  expected  to  be  seen  by  equipment  mounted  in  a 
fighter  or  attack  aircraft  that  crashes.  He  also  provided  us  with  the 
came  of  an  engineer  at  Koffat  field  California  who  has  carried  out  work 
to  determine  the  temperatures  and  duration  of  a  fire  resulting  from  crash 
of  these  type  aircraft.  Hay  Conliak  with  whon  we  keep  close  lieson  is 
to  contact  him. 

John  Finger  at  RASA  Langly  research  centre  is  carrying  out  a  study 
into  methods  of  obtaining  statistical  data  for  aircraft  structural  strong 
requirements.  He  has  promised  to  forward  us  details  of  this  work  and  of 
the  aims  of  the  study.  I  have  sent  him  a  copy  of  our  proposal  for  the 
CSFDR  study.  After  he  has  rsad  this  he  would  like  to  meet  with  us  if 
he  feels  either  he  could  help  with  our  study  or  that  we  could  help  in 
his  . 
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Ve  have  spoken  with  AVRADCOM  at  Ft.  Eustace  who  contracted  Hamilton 
Standards  for  the  production  of  the  AIRS  system, but  obtained  little 
information  not  already  known.  Ve  did  however  learn  that  a  Ur.  Tom  House 
at  Ft.  Eustace  was  investigating  the  feasability  of  fitting  a  maintainable 
recording  system  on  the  Black  Hawk  helecopter.  Vhen  he  returns  next  week 
we  intend  to  contact  him. 

Ve  have  been  in  touch  with  personnel  at  Marshall  Space  Centre  in  an 
attempt  to  obtain  details  of  data  compression  systems  and  are  following 
up  contacts  provided  by  them. 
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memorandum 


from  J  0  Bullock  ex*'  23k  <0  Mr  V  Otto 

Mr  1  Hooper 

(jajg  i'th  Septenoer  19"0 

reference  NJOB/BRB/kgv 

cc  Mr  R  Strange 
Mr  J  Brooking 
Mr  H  Eduards 
Mr  N  Bishop 
M/F  File 

Subject:  tiotes  on  visit  to  AIB  to  discuss  Wright-Patterson  Study 

A  visit  was  made  by  H  Edwards  and  N  Bullock  to  the  Accident  Investigation 
Branch,  Farnborough  on  11th  September. 

The  purpose  of  the  visit  was  to  discuss  various  aspects  of  the  crash  sur- 
vivable  recorder  study  being  carried  for  the  Wright-Patterson  airforce  base. 
The  person  contacted  was  Mr  Say  Davis,  Senior  Inspector  of  Accidents. 

We  outlined  the  overall  task  and  explained  that  at  this  stage  we  are  pri¬ 
marily  concerned  to  gather  opinions  as  to  the  necessary  parameters  to  record 
together  with  sampling  rates  etc.  We  asked  Mr  Davis  to  advise  on  other 
sources  of  this  data  and  he  provided  the  following  information:- 
RAF 

In  the  event  of  an  accident  a  board  enquiry  is  set  up.  It  consists  of  the 
President  who  is  an  officer  (from  another  station)  of  higher  rank  than  any¬ 
one  involved,  a  pilot  who  is'current'  on  the  aircraft  type  and  an  engineer 
officer.  The  AIB  are  called  in  to  give  engineering  advice  and  ir.  cases 
where  there  is  a  FDR  advise  on  replay. 

Army 

The  Army  has  its  own  accident  investigation  branch  at  Middle  Wallop  and  the 
person  in  charge  is  Major  Burt  Reed. 

Navy 

The  'lavy  also  has  an  accident  investigation  branch  which  is  at  Lee-on-Solent . 

Beth  the  Army  and  Navy  AIBs  are  mainly  concerned  with  helicopter  accident 
investigation.  None  of  the  Army  or  Navy  aircraft  or  helicopters  carry' 
crash  recorders. 

Other  useful  information  obtained  regarding  the  RAF  is  that  at  present  the 
only  aircraft  fitted  with  crash  protected  recoraers  are  the  Tornado,  the 
Hawk  and  the  7C10,  although  it  is  anticipated  that  the  Jaguar  will  be  retro¬ 
fitted.  The  RAF  have  a  flight  safety  branch  known  as  IF  5  and  the  person  in 
charge  is  Wing  Commander  Ray  Hancock  whose  telephone  number  is  01  -30  '015. 
His  boss  is  an  Air  Marshall  whose  name  Ray  Davis  has  promised  to  give  to  me. 

Cont'd. 


$ 
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Wing  Commander  Hancock  has  been  writing  up  a  requirement  for  recorders  to 
be  fitted  or.  RAF  aircraft, however  the  responsibility  for  such  a  decision 
rests  with  the  Air  Eng  department  and  contact  there  is  Squadron  Leader 
Peter  Sharp.  His  address  is  Air  Eng  12a,  Old  War  Office  Building,  Whitehall, 
Telephone  01  218  5115- 

There  has  been  resistance  in  the  RAF  to  the  fitting  of  crash  recorders  on 
the  basis  of  lack  of  space  and  cost.  Many  times  the  Accident  Investigation 
Branch  have  convinced  IFS  personnel  of  the  necessity  for  recorders  but  then 
these  personnel  have  been  posted  to  other  jobs  before  any  implementation  of 
the  recommendations.  Other  sources  of  information  suggested  were  BAe  Wartor., 
NAMA,  The  Flight  Test  Instrumentation  Department  Telephone  Preston  633333 
extension  336,  Mr  McFarland,  Mr  Maychir.  -  They  have  much  more  experience  on 
high  performance  aircraft. 

EoscombeDown  have  the  replay  facility  for  the  Hawk  and  will  probably  get  one 
for  Tornado. 

3rivish  Aerospace  Kingston  might  have  experience  with  regard  to  the  Hawk.  There 
is  a  replay  at  Dunsfold. 

BAe  Brough  have  flight  test  instrumentation  experience  on  the  Phantom  and 
Buccaneer.  Their  facility  for  recording  is  at  Holme-on-Spaldir.g  Moor. 

Mr  Davis  did  not  seem  to  think  that  a  great  deal  of  information  could  be 
obtained  from  other  sources  in  Europe  they  tend  to  follow  the  B  ritish  and 
American  lead.  The  French  have  a  crash  recorder  replay  facility  at  their 
equivalent  of  our  CAA  which  is  at  Bretigny  .  Germans  are  created  a  facility 
at  Brunswick.  A  useful  source  of  information  is  likely  to  be  a  Bernard 

Craiger  of  the  National  Research  Council  in  Ottawa.  Particularly  ejectable 
recorders. 

AI5  Status  and  Structure 

The  Accident  Investigation  Branch  is  a  brancn  of  the  department  of  trade 
which  means  that  it  is  separate  in  its  control  from  the  CAA.  CAA  is  the 
regulatory  body  and  the  AIB  advises  them  and  they  then  cause  the  regulation 
to  be  inacted.  CAA  liaises  in  an  Accident  Investigation  but  has  no  power 
in  the  investigation  itself  .  The  AIB  is  headedby  a  Chief  Inspector  and 
a  Deputy  Chief  Inspector  and  beneath  them  are  four  branches  three  of  them 
being  operational  branches  and  one  engineering.  Within  the  engineering 
branch  there  are  two  Senior  Inspectors  of  accidents,  one  being  Ray  Davis 
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and  the  other  Peter  Shepherd.  They  have  the  responsibility  for  replay  of 
civil  Cockpit  Voice  Recorders  and  Data  Accident  Recorders.  The  total  staff 
of  AIB  is  something  in  the  order  of  35  and  is  tending  to  increase  slightly 
and  approximately  half  the  workload  is  RAF  crashes. 

Survivability  requirements 

Mr  Davis  considers  that  the  present  survivability  requirements  as  defined 
:.n  CAA  Spec  10  are  adequate  in  that  equipment  that  is  produced  to  meet  them 
generally  survives, although  in  some  cases  the  severity  of  the  accident  may 
exceed  the  specification.  Mr  Davis  said  that  in  all  but  three  recent  acci¬ 
dents  the  recorder  had  survived  quite  adequately.  The  three  he  quoted 

where  tne  crash  exceeded  vhe  specification  are:  the  Viscount 
that  crashed  on  an  autobahn  the  707  that  crashed  in  Rome  where  there 

was  an  extremely  hot  fire, and  Vanguard  EE  that  crashed  at  Heathrow  and  again 
it  has  been  estimated  that  the  fire  well  exceeded  the  specification. 

In  all  three  cases  most  of  the  data  was  retrieve  from  the  recorders  in 
spite  of  the  severity  of  the  accident,  although  in  the  case  of  Viscount 
only  limited  data  was  recovered. 

As  a  part  of  the  survivability  discussion  we  asked  Mr  Davis  his  views  on 
ejectable  recorders.  He  said  that  in  the  vast  majority  of  cases  the  recorder 
is  found  amongst  the  wreckage  and  that  if  it  were  ejected  it  might  be  lost. 

The  last  recorder  that  was  lost  was  when  the  Comet  went  into  the  ''.eiiterranear.. 
For  civil  application  ejectable  recorders  are  not  acceptable  because  of  the 
danger  of  them  being  spuriouslyejected  and  either  resulting  in  loss  or 
possibly  injuries  to  passengers.  The  other  point  against  them  being  extra  and 
more  difficult  maintenance. 

Mr  Davis  told  us  that  Easams  had  done  quite  a  lot  of  work  on  survivability 
requirements . 

He  stated  that  in  his  opinion  seviceability  is  far  more  of  a  problem  than 
survivability.  Built  in  test  and  maintenance  requirements  need  tightening 
up  much  more.  His  opinion  is  that  military  survival  requirements  do  not 
need  to  be  different  from  civil.  However  he  made  the  point  that  the 
operating  environment  is  far  more  severe  in  terms  of  p-loads  during  manoeuvring 
He  stated  that  the  preferred  mounting  position  is  aft  of  the  rear  pressure  bulk 
head.  This  is  an  area  on  both  conventional  and  rear  engined  aircraft  tnat  is 
often  substantially  less  damaged  than  the  rest  of  the  aircraft. 
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Error  Rate 


In  connection  with  his  statement  that  serviceability  is  more  in  need  of 
tightening  up  than  survivability  I  asked  him  his  views  on  error  rate.  He 
feels  that  the  error  rate  in  specification  No.  10  is  probably  just  satis¬ 
factory  but  that  most  equipment  usually  does  much  better  them  the  one 
word  in  10  specified  and  ocassionally  they  still  have  trouble.  A  more 
realistic  figure  that  is  possible  to  meet  would  appear  to  be  one  in  10^. 

Duration  and  compression 

As  an  immediate  response  to  the  question  of  duration  Mr  Davis  made  the 
following  comments . 

1.  That  it  should  not  be  less  than  the  aircraft  sortie  capability. 

2.  That  one  or  two  previous  flights  were  extremely  useful  to  sort  out 
spurious  information  such  as  incorrect  transducer  calibration. 

3.  That  two  to  four  hours  would  be  a  bear  minimum  for  a  single  seat 
aircraft. 

b.  That  if  milking  can  be  done  without  degrading  the  recording  a  single 
flight  duration  would  be  satisfactory.  However  if  milking  is  opted 
for  facilities  have  to  exist  in  all  stations  where  the  aircraft  may 
commence  the  flight. 

Mr  Davis  is  opposed  to  compression  because  nobody  has  convinced  him  that 
there  is  a  system  which  can  be  used  that  will  not  lose  essential  data. 
Possible  means  of  compression  is  changing  the  parameters  that  are  being 
recorded  depending  upon  the  flight  condition.  Compression  of  the  audio 
signal  would  be  completely  unacceptable  because  they  use  the  signal  for 
detecting  the  operation  switches  and  analysing  all  sorts  of  sound  that 
would  probably  be  below  the  threshold  of  operation.  They  also  listen 
to  crew  breathing. 

Thirty  minutes  duration  is  probably  satisfactory  for  military  aircraft. 


Parameters 


Prior  to  the  meeting  we  had  produced  sheets  with  possible 
listed  and  spaces  provided  for  sampling, accuracy  etc.  Mr 
to  have  a  first  attempt  at  filling  in  these  sheets  in  the 
There  waB  a  wide  discussion  on  the  question  of  parameters 
points  emerged: 


parameters 
Davis  promised 
next  two  weeks, 
and  the  following 
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Mr  Davis  considers  that  audio«-both  voice  and  general  cockpit  sound  is  essen¬ 
tial.  Less  useful  on  a  single  .-ater  aircraft  because  of  less  speech  but 
still  very  useful.  Relative  time  between  events  on  the  aircraft  is  very 
important  and  relative  time  between  aircraft  and  ground  events  is  equally 
important.  Elapsed  time  and  the  means  correlation  between  aircraft  time 
and  ground  time  such  as  press  to  transmit  is  more  useful  than  GMT  because, 
surprisingly, ATC  times  at  different  towers  can  very  by  upto  2  minutes. 

Other  points  from  the  parameter  list  are  (a)  Normal  acceleration  is  the 
same  as  normal  load  factor  (b)  Roll  attitude  is  the  same  as  bank  angle 
(c)  Primary  flying  controls  are  the  same  as  aleron/elevator/radar  position. 

DME  (Distance  Measuring  Equipment)  would  be  a  useful  parameter  to  record 
on  military  aircraft. 

Mr  Davis  mentioned  in  conversion  that  British  Airways  have  a  solid  state 
recorder  which  they  use  on  Concorde  which  retains  information  for  a  few 
hours  after  landing.  Peter  Waller  is  responsible  for  it  and  is  also  gen¬ 
erally  liable  to  be  a  useful  contact.  He  thinks  that  Plessey  are  probably 
the  manufacturers.  The  recorder  is  used  to  record  details  of  exceedances 
such  as  over  temperatures  on  engines  and  he  thinks  it  can  be  programmed 
in  flight  by  the  crew  to  record  details  of  any  exceedances  noticed. 


N  J  0  BULLOCK 
Project  Engineer 


r 
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memorandum 


from  3uiiock  exl  23^ 

date  33rd  September  1^30 

reference  ;;jOB/BRBA9o 


to  yjr  v  Otto 
Mr  3  Hooper 

cc  Mr  H  Strange 
Mr  J  Brooking 
Mr  H  Edwards 
Mr  fl  Bishop 
K/F  File 


Subject:  ,'iotes  on  visit  to  3ritisn  Airways.  Engineering  to  discuss  Wright- 
Patterson  Study 


A  visit  was  made  by  H  Edwards  and  K  Bullock  to  the  British  Airways  Engineering 
3ase,  Building  TBK  at  Hatton  Cross.iPO  3ox  10,  British  Airways,  Heathrow  Air¬ 
port,  Hounslow,  Middx,  TW6  2JAi  on  the  23rd  September  1?SC. 

The  purpose  of  the  visit  was  to  discuss  various  aspects  of  the  '’rash  Surviv 
able  Recorder  Study  being  carried  out  for  the  Wright -Patterson  Airforce  Ease. 
The  person  contacted  was  Mr  Peter  Waller,  Senior  Principal  Engineer  Flight 
Tata  Recording. 

As  the  meeting  had  only  been  arranged  the  day  before  it  had  not  been  possible 
to  send  the  letter  (NJOB/BRB/U95)  confirming  the  appointment  and  outlining 
the  topics  to  be  discussed.  I  therefore  gave  Mr  Waller  a  copy  of  the  letter. 

Mr  Waller  promised  to  give  consideration  to  the  questions  when  he  had  more 
time.  I  said  X  would  send  him  a  copy  of  our  questionnaire  as  soor.  as  it  is 
complete  and  he  said  he  would  fill  in  those  parts  of  it  that  he  ccuid  pro¬ 
viding  it  did  not  require  too  much  time. 

The  meeting  then  consisted  of  a  general  conversation  about  various  aspects 
cf  aircraft  recording  and  of  the  task  of  the  study.  Mr  Waller  believes  that 
the  maintenance  recording  aspects  of  aircraft  recorders  are  extremely  impor¬ 
tant,  and  that  even  if  they  are  not  intended  for  this  purpose  almost  certainly 
the  operators  will  want  to  use  them  either  for  maintenance  purposes  or  for 
investigating  malfunction  reports.  He  quoted  as  an  example  that  the  Hawk 
crash  recorder  had  been  used  to  investigate  incidents  that  would  have  probably 
lead  to  a  grounding  of  the  aircraft  if  the  information  had  not  been  available. 
He  also  said  that  Bernard  Craiger's  paper  to  the  ISASI  Annual  Seminar  at 
Montreal  in  September  1979  contains  useful  information  on  this  subject.  A 
very  important  consideration  if  recorders  are  to  be  used  for  maintenance 
purposes  is  access  to  the  data.  This  can  either  be  done  by' milking’ the 
recorder  or  by  removing  a  cassette.  Mr  Waller  quoted  the  Lockheed  recorder 
and  the  new  Sunstrand  recorder  as  examples  of  those  that  can  be'  milr.ed'.  The 
Lockheed  can  be  replayed  at  approximately  30  times  the  tape  speed  and  1 
tracks  at  a  time.  The  new  Sunstrand  recorder  is  at  Data  Acquisition  and 
recorder  in  a  ;ATR  case  and  can  bemilked  in  approximately  15  minutes. 

Mr  Waller  expressed  the  view  that  15  minutes  was  the  maximum  acceptable 
milking' time.  He  doesn't  regard 'milking' as  a  method  which  is  acceptable 
to  British  Airways  because  it  involves  having  a  large  number  of  personnel 
and  a  lot  of  equipment. 


AIRCSEARCH  MANUFACTURING  COMPANY 


81-17693 
Page  G-20 


]  asked  whether  he  knew  whether  tne  Plessev  lc ckheed' all  in  one' system  has 
sold  iii  any  quantity,  he  said  it  had  not  tr.ey  believe  because  legislation 
had  not  yet  demanded  that  it  should  be  fitted. 


British  Airways  are  seeking  tenders  for  supply  of  a  maintenance  recorder 
for  use  on  their  Boeing  757  aircraft.  It  will  use  a  3M  band  drive  type 
cassette  which  has  beer,  developed  to  a  state  where  it  is  capable  of  recor¬ 
ding  approximately  15  mega  bits.  British  Airways  have  only  sought  quotes 
from  companies  that  they  feel  have  equipment  which  is  at  least  near  to 
their  requirement.  The  companies  in  question  are  Hanbush,  Penny.  4  Giles, 

Davell  and  Peripherals  Development  Associates  of  Costa  Me6a,  California. 

It  appears  that  they  are  connected  with  Douglas  Longbeech  because  we  saw 
a  paper  which  was  jointly  prepared  by  them  and  one  Anthony  Aquion  of 
Doug,  as  Aircraft  Company. 

The  crash  recorder  on  the  757  will  either  be  the  new  Sunstrand  system  or 
tne  Lockheed,  Penny  &  Giles  or  Da veil.  Tne  Sunstrand  is  standard  fit  but 
BA  are  slightly  concerned  as  to  whether  it  will  in  fact  be  available  in 
time.  Eastern  Airlines  are  opting  for  Lockheed.  I  got  the  impression 
British  Airways  do  not  favour  the  Lockheed.  All  four  recorders  are  capa¬ 
ble  of  recording  6A  12  bit  words  per  second. 

Mr  Waller  outlined  the  background  to  BA's  maintenance  recorder  activity. 

They  started  many  years  ago  experimental  mcritoring  one  engine  on  the 
Vanguard  to  see  whether  such  a  system  were  possible.  The  next  step  was 
to  measure  maintenance  parameters  on  all  three  engines  of  the  Trident  1  and 
then  a  more  sophisticated  system  on  the  Trident  three  which  was  con¬ 
sidered  to  be  just  cost  affective  providing  the  equipment  could  be  in¬ 
stalled  in  a  new  aircrc.ft  however  retro  fitting  would  not  be  justified. 
Maintenance  recording  is  now  advanced  such  that  on  Tristar  maintenance 
is  entirely  determined  by  the  recorded  data.  At  present  the  recorder 
is  removed  from  each  aircraft  every  day  and  the  analysis  is  not  availa¬ 
ble  until  a  day  and  a  half  later.  However  cm  the  new  system  it  is 
intended  to  make  a  quick  appraisal  of  the  data  much  more  quickly  than 
this  and  a  full  analysis  later.  The  present  cassettes  have  capacity 
of  It  hours  flying  and  generally  an  aircraft  will  only  do  about  8  hours 
flying  a  day. 

KL.M  have  done  some  work  on  a  form  of  data  compression  but  it  was  not  very 
successful.  The  person  to  speak  to  at  KLK  is  Henk  Vermeulen,  Telephone 
01031  20t9lt79- 

BA  have  looked  at  solid  state  recorders  particularly  bubble  memories  but 
do  not  believe  that  the  difficulties  vitr.  high  and  low  temperatures 

have  been  solved,  they  also  consider  that  the  stability  of  the  chips  is  not 
adequate  for  the  shocks  that  would  be  experienced  in  a  crash. 

For  maintenance  purpose  it  is  only  engine  parameters  that  are  recorded,  however 
from  the  point  of  vipw  of  assessing  aircraft  state  of  health  normal 'g'is  used 
and  compared  with  the  manufacturers  fatigue  calculations  for  the  purpose  of 
extending  fatigue  life  of  the  wings.  As  a  rough  rule  of  thumb  the  data  cap- 
pacity  required  for  maintenance  data  is  comparable  with  that  required  for 
the  mandatory  parameters. 

Mr  Waller  expressed  the  opinion  that  the  USA.  is  primitive  in  its  use  of  main¬ 
tenance  data  by  comparison  with  Europe  cermair.ly  in  civil  operations. 
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Other  people  who  might  be  of  help  to  us  are:  Swiss  Air,  Robert  Luscher  in 
*-'*rtch.  Telephone  01  812  1069,  and  at  DLH,  Peter  Ladwig,  he  is  Hamburg 
Telephone  OlO  509  230i. 

The  AIDS  Replay  facility  at  British  has  been  developed  mainly  for  the 
Tristar  fleet. 


The  system  is  based  on  a  LSI-11  minicomputer.  The  data  is  read  off  the  tape 
and  processed  using  a  bit-slice  microprocessor.  The  processing  corrects 
timing  errors  and  decodes  the  data  to  NRZ.  The  sync  is  then  removed  and 
the  data  assembled  into  word  blocks  by  a  further  processor. 

The  data  is  then  processed  by  the  DS1-11  which  separates  the  decrete 
signals  out  of  the  12  bit  words  and  presents  the  data  in  engineering  units 
in  graphical  and  or  in  a  tabulated  form. 


J  0  3ULD0CK 
roject  Engineer 


Footnote 

1.  The  Sundrand  'Universal  Flight  Data  Recorder'  data  sheet  states  that  the 
replay  time  is  30  min  not  15  min  as  in  the  above  notes. 

2.  The  Fairchild  'Digital  Flight  Data  Recorder’  F88O  data  sheet  states  that 
the  Quick  Access  Cartridge  (which  appears  to  be  a  3M  type)  has  a  capacity 
of  6?  Mbit.  However  I  got  the  impression  from  Mr  Waller  that  the  F8S0 
might  not  actually  exist  yet. 
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memorandum 


from 

date 

N  J  0  Bullock 

9th  October  1980 

ext.  23^ 

to 

Mr  V  Otto  -  Garrett,  Torrance 

Mr  D  Hooper 

cc 

Mr  R  Strange 

reference 

NJOB/BRB/503 

Mr  J  Brooking 

Mr  H  Edwards  -  Garrett,  Torrance 
Mr  N  Bishop  -  Garrett,  Torrance 
M/F  ’  File 

Subject : 

Notes  on  visit  to  RAE 

Structures  Department 

to  discuss  Wright- 

Patterson  Study 


A  visit  was  made  by  N  Bullock  to  the  Royal  Aircraft  Establishment  Structures 
Department,  Farnborough,  Hants,  GUllj  6TD  on  the  3rd  October, 

The  purpose  of  the  visit  was  to  discuss  various  aspects  of  the  crash  survivable 
recorder  study  being  carried  out  for  the  Wright-Patterson  Airforce  Base.  The 
person  contacted  was  Mr  John  Sturgeon  of  the  Structures  Department.  Mr  Sturgeon 
has  been  involved  with  certain  aspects  of  accident  investigation  for  many  years 
and  is  frequently  consulted  on  recorder  and  recording  requirements  by  the  RAF, 
CAA  and  others.  He  was  closely  involved  with  the  Tornado  recorder  specification 
and  with  the  selection  of  the  contractor. 

The  first  part  of  the  meeting  took  the  form  of  a  general  discussion  and  the 
following  points  emerged 

A  negligible  number  of  accidents  are  caused  by  aircraft  structural  failure  or 
engine  failure.  Before  there  were  accident  recorders  virtually  all  accidents 
were  concluded  to  have  been  caused  by  pilot  error  but  it  was  not  discovered 
why  the  pilot  had  made  an  error  so  that  prevention  of  a  reputation  was  unlikely . 
With  the  advent  of  recorders  it  has  been  possible  to  discover  why  the  error  was 
made  and  take  corrective  action.  An  example  of  this  was  the  Trident  crash  at 
Madrid  which  was  caused  by  the  aircraft  attitude  affecting  the  airspeed  sensor 
in  such  a  way  that  as  the  aircraft  rotated  after  take-off  there  was  a  5  -  10 
knots  reduction  in  indicated  airspeed  which  led  the  pilot  to  believe  that  he 
had  had  a  double  engine  failure. 

It  can  be  seen  from  the  above  example  that  there  is  a  good  case  for  the  recorder 
recording  the  signal  which  is  displayed  to  the  pilot,  however  it  is  vital  that 
it  is  not  degraded  in  the  process  of  recording  it. 

There  is  also  a  case  for  recording  the  same  parameter  from  an  independant  source 
and  indeed  recording  both  signals. 

Mr  Sturgeon  said  that  most  accidents  occur  during  landing,  approach  or  hold  and 
are  because  several  things  occur  simultaneously.  The  human  brain  can  cope  with 
two  variables  going  outside  normal  limits  at  the  same  time  but  if  a  third  area 
needs  attention  it  is  either  left  unattended  or  one  of  the  first  two  is  for¬ 
gotten  . 

Mr  Sturgeon  said  that  the  actual  rate  of  roll  and  pitch  on  modern  military  air¬ 
craft  is  less  than  it  used  to  be,  a  typical  time  to  go  from  straight  and  level 
to  90  bank  is  lj  seconds  and  to  go  from  straight  and  level  to  upsidedown 
2 \  to  3  seconds. 
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Duration 


Mr  Sturgeon' s  opinion  is  that  in  a  vast  majority  of  cases  it  is  the  last  fev 
seconds  of  data  which  is  most  significant.  There  is  little  advantage  in 
going  beyond  the  accident  flight  and  the  previous  landing,  however  the  whole 
of  the  previous  flight  can  be  useful.  The  previous  landing  and  the  take-off 
and  climb  give  confidence  that  the  sensors  are  properly  calibrated.  To 
satisfy  the  above  about  2  hours  are  required  for  fighter  trainer  aircraft 
and  10  hours  for  transport  bomber  aircraft . 

Inclusion  of  Voice 


MrSturgeon  does  not  regard  voice  as  being  nearly  as  important  as  Fay  Davis 
but  believes  that  it  is  not  a  large  penalty  and  should  be  included  in  future 
recorders.  A  duration  of  15  minutes  would  be  sufficient  as  a  minimum  com¬ 
pared  with  an  absolute  minimum  of  30  minutes  of  data. 

Serviceability  and  Emergency  Operation 

MrSturgejn  felt  quite  strongly  that  the  biggest  change  needed  to  present  recor¬ 
ders  was  a  large  increase  in  reliability.  He  said  that  the  chances  of  a  recording 
system  working  perfectly  at  the  time  of  an  accident  was  probably  less  than 
50/6,  maybe  as  low  as  10/6  because  built-in  test  on  most  recorders  does  not 
adequately  test  the  system,  certainly  does  not  test  the  transducers. 

He  believes  that  the  only  way  to  be  certain  that  an  accident  recording  system 
is  functioning  correctly  is  to  replay  a  complete  flight  and  he  said  that  it 
should  be  possible  to  do  this  without  removing  the  recorder  from  the  aircraft. 

He  also  said  that  if  the  MTBF  of  the  system  is  1000  hours  (which, in  reality 
is  all  that  is  likely)  there  needs  to  be  a  replay  every  50  to  100  hours  in 
order  to  give  a  reasonable  confidence  level. 

Mr  Sturgeon  does  not  think  it  is  possible  to  make  a  recorder  that  would  work 
after  impact  or  that  this  would  be  particularly  useful.  On  the  Tornado  the 
recorder  stops  when  the  a.c  power  fails.  If  the  recorder  is  run  from  the 
emergency  d.c  supply  you  either  have  the  increased  weight  penalty  of  a  larger 
battery  or  reduction  in  the  emergency  power  available  for  flying  the  aircraft. 

One  has  to  chose  whether  to  use  all  emergency  power  to  try  and  save  the  air¬ 
craft  and  pilot  or  whether  to  use  some  of  it  to  keep  the  recorder  running  and 
therefore  know  why  the  aircraft  has  been  lost. 

Compression 

Mr  Sturgeon  does  not  believe  that  data  compression  is  possible  without  loss  of 
valuable  information.  He  quoted  the  Buccanneer  that  crashed  in  Nevada  where 
everything  was  normau  up  until  3  seconds  before  break-up  and  therefore  it  was 
the  last  3  seconds  of  data  which  allowed  analysis  of  the  accident  and  this 
would  probably  have  been  lost  or  degraded  had  a  compression  system  been  in  use. 

He  also  said  that  the  memory  that  would  be  necessary  with  a  compression  system 
would  have  to  be  crash  protected  which  would  either  need  a  separate  crash  pro¬ 
tected  package  or  an  increase  in  cabling  between  the  acquisition  unit  and  the 
recorders. 

Ejectable  recorders 

He  is  against  ejectable  recorders.  He  said  that  if  recorders  are  mounted  in  the 
tail  there  is  a  95)6  chance  of  finding  them  and  of  then  having  survived  the  accident  ade¬ 
quately.  The  chance  of  finding  an  ejectable  recorder  is  much  less,  he  said 
that  in  many  cases  the  radio  beacons  do  not  work  if  they  land  say  in  a  wet 
forest  and  f  even  if  they  work  it  is  impossible  to  get  them  out  of  a  very 
rough  sea. 
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Survival 

Mr  Sturgeon  expressed  the  viev  that  there  was  a  95/f  survival  rate  of  recorders 
designed  and  tested  to  CAA  Spec  10  requirements.  This  was  slightly  contra¬ 
dictory  because  he  had  previously  said  that  the  survival  requirement  should 
be  to  the  original  Tornado  levels  which  were  subsequently  substantially  reduced. 

Maintenance 

He  did  not  seem  to  think  that  a  great  deal  could  be  gained  from  maintenance 
recording  but  thought  that  if  the  recorders  were  in  daily  use  on  a  task  in 
which  the  operator  was  interested  at  least  it  meant  that  they  would  be  kept 
working.  Although  not  a  maintenance  recorder  the  Hawk  unit  can  be  milked 
in  about  20  minutes.  He  said  that  the  Tornado  recorder  would  be  converted 
to  fast  replay  sometime  in  the  future,  he  does  not  believe  that  it  would  be 
possible  to  replace  it  with  a  solid  state  memory. 

Parameters 


The  signals  that  are  recorded  should  be  those  that  are  displayed  to  the  pilot. 

The  most  important  are  the  following: 

The  three  linear  accelerations,  pitch,  roll,  heading,  position  of  major  con¬ 
trol  surfaces,  status  of  auto  stabilisation  system  and  auto  pilot,  some  engine 
information  to  give  some  idea  of  thrust  for  example  engine  pressure  ratio 
(possibly  throttle  position  as  an  alternative).  The  minimum  sampling  rate 
should  be  8  times  per  second  and  MrSturgeon  thought  that  it  was  better  to  have 
a  high  sampling  rate  onafew  parameters  rather  thannore  parameters  at  a  low  sam¬ 
pling  rate. 

I  left  a  copy  of  the  Questionnaire  with  MrSturgeon  and  he  promised  to  fill  in 
those  parts  of  it  to  which  he  could  make  a  useful  contribution  when  he  had  time 

I  took  the  opportunity  of  showing  MrSturgeon  the  F18  TTM  and  he  was  very 
impressed  by  the  design  and  felt  that  it  was  one  of  the  few  recorders  that 

he  had  seen  that  was  likely  to  work  under  the  angular  acceleration 
conditions  that  exist  in  aircraft  although  not  in  the  environmental  specifications. 


*/ 

3  JO  BULLOCK 
Project  Engineer 
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memorandum 


from 

date 

N  J  0  Bullock 

23rd  October  1900 

ext.  231* 

to  Mr  V  Otto  -  Garrett,  Torrance 
Mr  D  Hooper 

cc  Mr  R  Strange 

reference 

NJOB/BRB/509 

Mr  J  Brooking 

Mr  H  Edwards  -  Garrett,  Torranc 
Mr  N  Bishop  -  Garrett,  Torrance 
M/F  File 


Subject:  Notes  on  visit  to  Easams  Ltd  to  discuss  Wright -Patterson  Study 

A  visit  was  made  by  N  Bullock  to  Messrs  Easams  Ltd,  Lyon  Way,  Frimley  Road, 
Camberley,  Surrey,  GU16  5EX  on  the  20th  October.  The  purpose  of  the  visit 
was  to  discuss  various  aspects  of  the  crash  survivable  recorder  study  being 
carried  out  for  the  Wright-Patterson  Airforce  Base.  The  person  contacted 
was  Mr  Dave  Gill,  Senior  Engineer,  Recorders.  Mr  Gill  has  been  with  Easams 
for  three  years  and  is  their  recorder  specialist.  He  has  been  concerned  with 
Tornado, Hawk  and  Nimrod  recorders  amongst  others.  Prior  to  working  at  Easams 
he  had  spent  seven  years  at  the  RAF  Central  Servicing  Development  Establish¬ 
ment  at  Swanton-Morley  in  Norfolk.  One  of  their  chief  functions  is  to  advise 
the  Ministry  of  Defence  on  questions  concerning  maintainability.  They  also 
have  a  maintainability  data  bank  and  industry  to  get  information  on  MTBF  of 
various  equipments.  A  general  discussion  was  held  and  the  following  points 
emerged: 

Mr  Gill  did  not  have  any  specific  information  on  survivability  requirements 
but  thought  that  the  present  spec  10  levels  were  adequate  and  reiterated 
the  views  of  others  that  serviceability  and  built  in  test  is  the  area  that 
needs  improvement  far  more  than  survivability.  He  said  that  as  a  rule  of 
thumb  the  MTBF  figure  achieved  on  military  combat  aircraft  was  only  one 
sixth  of  that  achieved  with  the  same  equipment  in  civil  aircraft.  In  his 
experience  electronic  equipment  with  a  built  in  test  calculated  confidence  level 
in  the  90?  would  in  fact  only  achieve  something  in  the  order  of  70?,  and  on 
recorders  produced  to  date  the  built  in  test  probably  only  detects  something 
like  25?  of  all  failures.  In  practice  a  system  MTBF  of  about  200  hours  is 
all  that  is  achieved.  However  this  does  not  present  as  big  a  problem  as  it 
might  appear  because  the  average  flying  time  for  combat  aircraft  is  only 
300  hours  per  year.  Nimrods  flying  time  would  of  course  be  much  more. 

In  his  opinion  the  only  way  of  proving  that  a  system  is  working  correctly  is 
to  replay  the  information.  This  can  either  be  by  use  of  a  quick  access 
duplicate  record  or  by  milking  the  recorder.  He  does  not  feel  that  the 
quick  access  approach  gives  sufficient  confidence  that  the  main  recorder  is 
working  since  this  is  the  most  unreliable  part  of  the  system.  The  milking 
rate  normally  required  is  8  -  10  times  record  speed,  however  for  the  purpose  of 
verifying  that  the  system  is  working  it  is  sufficient  to  replay  say  the  last 
15  minutes  of  a  flight.  This  would  show  decent  from  a  known  altitude  at  a 
known  glide  slope  and  landing  at  a  known  airfield  and  would  give  a 

reasonable  degree  of  confidence  in  the  transducers  .  The  required  periodicity 
of  these  check  replays  would  be  about  75  hours. 

The  required  duration’  should  be  that  required  for  one  complete  flight  which 
on  the  combat  aircraft  is  probably  2  -  2}  hours,  on  trainer  aircraft  1  hour 
and  on  transport  bomber  aircraft  8-11  hours. 


r 
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Mr  Gill  was  dubious  about  the  usefulness  of  voice  because  of  the  liaited 
amount  of  communication  on  the  aircraft;most  being  with  the  ground  which  is 
recorded  anyway.  He  felt  that  general  cockpit  audio  was  probably  not  useful 
because  of  the  very  high  noise  level  and  that  if  you  did  have  it  for  the  point 
of  view  of  recording  switch  operations  and  so  forth  it  would  have  to  be  on  a 
separate  channel  from  speech.  Voice  duration  on  the  Tornado  is  Uo  minutes 
and  data  120  minutes. 

On  the  general  question  of  parameters  and  sampling  rates  he  said  that  on  Tornado 
the  parameters  had  been  decided  by  John  Sturgeon  and  he  had  no  reason  to 
think  they  are  wrong  but  the  sampling  rate  on  such  things  as  the  status  of 
terrain  following  equipment  probably  needed  to  be  much  faster  say  32  samples 
per  second. 

The  recorder  should  be  located  at  the  rear  of  the  aircraft  for  best  survival 
chances.  On  ejectable  recorders  he  said  one  argument  in  favour, that  the 
Canadians  advance  is  that  in  their  conditions  of  extremely  low  temperature 
and  high  probability  of  snow  fall  they  can  recover  them  quickly.  However 
Mr  Gill  expressed  the  view  that  there  could  equally  well  be  circumstances  in 
which  it  was  not  possible  to  search  for  them  at  all  because  of  bad  weather 
conditions  within  the  life  of  the  radio  beacon,  in  such  circumstances  it 
would  be  better  for  a  recorder  to  be  with  a  large  mass  of  wreckage  which 
could  be  found  later.  He  did  not  think  anybody  had  done  a  real  analysis 
of  the  pros  and  cons  of  ejectable  recorders.  He  thought  there  was  a  good 
deal  of  prejudice  on  both  sides.  One  argument  against  them  which  he  sym¬ 
pathised  with  was  that  because  the  forces  acting  during  a  crash  situation 
are  outside  normal  limits  it  is  quite  possible  for  them  to  deploy  prior 
to  the  accident  and  therefore  not  record  the  conditions  during  the  last 
vital  moments  before  impact. 

He  did  not  have  any  views  on  cost  but  did  mention  in  conversation  that  the 
Tornado  cassette  voice  recorder,  which  is  alBo  used  for  computer  loading, costs 
about  13000  and  is  gov  working  well.  They  are  successfully  using  it  to  load 
the  computer  at  -30  C. 

As  another  comment  on  sampling  rate  he  mentioned  that  the  lateral  acceleration 
on  the  Hawk  could  change  extremely  quickly  and  is  very  critical  and  should 
probably  have  a  sampling  rate  of  32  samples  per  second. 

I  left  Mr  Gill  a  copy  of  our  questionnaire  and  he  promised  to  fill  in  those 
parts  where  he  could  make  a  useful  contribution  as  soon  as  possible. 

Mr  Gill  asked  whether  it  would  be  possible  to  have  a  copy  of  our  report  and 
also  whether  it  would  possible  for  the  fact  that  Easams  have  made  a  contribu¬ 
tion  to  the  study  to  be  mentioned  in  the  report.  I  said  I  would  endeavour  to 
make  this  possible. 

Mr  Gill  suggested  two  people  that  it  would  be  useful  for  us  to  speak  to.  Herr 
W  Bauer  at  MBB  Ottobrunn,  and  Gordon  Hurry  MOD  RD  Eng  It  at  Prospect  House,  Tel 
01-632-6321. 

I  took  the  opportunity  of  shoving  Mr  Gill  the  Fl8  TTM  and  gave  him  a  data  sheet 
and  descriptive  leaflfet. 


tiV&JLl 

I  JO  BULLOCK 
Project  Engineer 
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memorandum 


from 

date 

N  J  o  Bullock 

18th  November  1980 

ext.  234 

to  Mr  V  Otto  -  Garrett  Torranc 
Mr  D  Hooper 

cc  Mr  R  Strange 

reference 

NJOB/BRB/ 518 

Mr  J  Brooking 

Mr  H  Bdwards  -  Garrett  Torr 
Mr  N  Bishop  -  Garrett  Torra 

M/F 


File 


Subject:  Notes  on  visit  to  Civil  Avietion  Authority  to  discuss  Wriqht- 
Pa  t ter son  Study 


A  visit  vas  made  by  N  Bullock  to  the  Civil  Aviation  Authority,  Brabazon  House, 
Redhill,  surrey  RBI  ISO  on  the  12th  November.  The  purpose  of  the  visit  was  to 
discuss  various  aspects  of  the  crash  survivable  recorder  study  being  carried 
out  for  the  US  Airforce  Systems  Comand  Wright-Patterson  Airforce  Base.  The 
persons  contacted  were  Mr  T  O'Brien  and  Mr  N  Ferrett. 

Duration 


The  view  was  that  the  minimum  duration  should  be  one  complete  flight,  there  was 
some  sympathy  for  the  idea  of  recording  the  take-off  and  the  last  few  minutes 
of  flight  but  in  some  cases  a  compjete  recording  is  necessary  where  for  instance 
a  navigational  error  has  been  made.  In  any  case  it  should  be  at  least  the  last 
30  minutes  that  is  recorded  rather  than  the  last  IS  which  has  been  suggested. 

On  the  question  of  data  compression  it  was  felt  that  this  was  not  feasible  in 
a  tape  system  because  this  would  mean  incremental  tape  notion  with  consequent 
increased  complexity  and  unreliability  and  also  mean  some  tape  wastage.  It 
was  however  felt  that  with  the  solid  state  memory  system  it  could  give  advan¬ 
tages  of  being  able  to  record  additional  parameters.  In  any  event  there  must 
be  no  loss  of  recording  accuracy. 

Survivability 


The  present  specification  ten  survivability  levels  are  regarded  as  adequate  pro¬ 
viding  the  recorder  is  mounted  in  the  rear  of  the  aircraft  and  probably  secured. 
It  should  be  as  far  aft  as  possible  and  remote  from  sources  of  fire.  It  must 
remain  attached  to  the  local  structure  of  the  aircraft  and  this  can  be  a  problem 
particularly  if  anti-vibration  mounts  are  employed.  It  was  agreed  that  the 
actual  test  method  involved  in  the  survivability  tests  needs  specifying  partic¬ 
ularly  the  base  on  which  the  unit  is  mounted  during  penetration  tests  and  also 
in  the  case  of  the  fire  test  the  fact  that  the  most  vulnerable  part  of  the  re¬ 
corder  should  be  subjected  to  the  fire.  The  survivability  test  levels  were 
examined  in  some  detail  about  B  years  ago  by  the  working  group  which  proceeded 
the  issue  of  spec  10  they  were  based  upon  the  requirements  in  TSO  CSla  which  was 
evolved  about  10  years  ago.  Mr  O'Brien  said  that  no  recorders  designed  to 
spec  10  requirements  had  failed  to  survive  in  accidents  to  date.  Mention  was 
made  of  the  fact  that  the  voice  recorder  survivability  requirements  are  of  a  much 
lower  level  than  the  data  recorder  ones,  Mr  O'Brien  said  that  this  was  for 
historical  reasons  and  that  at  the  time  the  specification  11  requirements  were 
written  there  were  no  voice  recorders  that  met  the  more  severe  requirements 
and  therefore  it  would  have  been  pointless  to  call  for  thee,  however  he  agreed 
that  both  recorders  should  be  subjected  to  the  same  survivability  tests.An  ICAO 
Working  Group  is  looking  at  new  requirements  for  both  data  and  voice  recorders 
and  this  will  almost  certainly  recommend  the  same  levels  of  crash  survivability 
for  both.  The  Chairman  of  the  ICAO  Working  Group  is  Bill  Trench  of  the  British 
AIB.  (He  is  likely  to  be  attending  the  next  meeting  of  WG21) . 
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Serviceabili tv 


It  wa*  agreed  that  there  is  a  vital  need  to  have  a  high  level  of  serviceability . 
Hr  O'Brien  said  that  Spec  10  required  90X  confidence  that  the  system  is  func¬ 
tioning.  He  said  that  in  fact  this  was  much  too  low  a  number  and  it  should  be 
something  like  99*  but  on  the  other  hand  it  was  quite  hard  to  achieve.  I  men¬ 
tioned  to  him  that  some  people  I  have  spoken  to  have  suggested  that  the  average 
availability  is  only  something  like  5 OX,  he  said  that  he  thought  it  had  improved 
a  lot  on  more  recent  recorders  and  they  probably  do  achieve  something  like  90X. 
Periodic  replays  are  required  at  intervals  which  vary  from  6  months  to  much 
longer,  I  think  that  the  variation  is  at  the  discretion  of  the  local  CM  sur¬ 
veyor.  It  was  agreed  that  if  the  recorder  could  have  a  maintenance  function 
this  would  be  very  useful  as  the  operators  would  then  make  sure  they  remain 
serviceable. There  is  a  requirement  on  Civil  Aircraft  that  the  recording  of  one 
complete  flight  (I  am  not  sure  what  the  duration  has  to  be)  is  held  for  compari¬ 
son  purposes  in  case  accident,  this  could  present  a  minimum  duration  requirement. 

Cost  Benefit 


CM  are  not  aware  of  any  study  to  show  that  the  carriage  of  recorders  is  cost 
beneficial  in  terms  of  saving  aircraft.  However  they  are  certain  that  it  is 
essential  to  determine  the  cause  of  accidents  and  that  recorders  are  an  extremely 
valuable  aid  in  the  process  and  are  likely  to  become  more  necessary  as  aircraft 
become  more  complex  and  larger  and  therefore  more  likely  to  be  totally  destroyed 
by  fire. 

Deployable  Recorders 

CM  are  not  in  favour  of  deployable  recorders  for  the  following  reasons: 

Because  they  are  not  crash  protected  they  may  be  damaged  after  deployment,  they 
may  be  lost  because  of  failure  of  their  location  beacons,  they  are  more  complex 
to  maintain,  they  may  be  deployed  in  error  and  even  cause  an  accident  themselves , 
they  have  to  be  located  in  an  area  of  the  aircraft  where  the  environment  is 
worse  and  extra  cabling  runs  are  involved. 

Questionnaire 


I  left  a  copy  of  our  Questionnaire  and  hr  O'Brien  promised  to  complete  those 
parts  of  it  that  he  could.  He  commented  on  the  parameter  list  to  the  effect  that 
it  would  become  necessary  to  record  the  information  being  presented  to  the  pilot 
by  the  cathode  ray  displays  which  will  shortly  become  current.  He  agreed  that 
the  formulation  and  implementation  of  any  new  requirements  was  bound  to  lag 
the  actual  use  of  these  displays. 


■ikiijLL 


H  J  O  BULLOCK 
Project  Engineer 
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memorandum 


from 

K  J  0  Bullock 

ext.  23L 

to 

Kr  V  Otto  -  Garrett  Torrence 

Mr  D  Hooper 

date 

1st  December  1980 

cc 

Mr  R  Strange 

reference 

NJ0B/BRB/522 

Mr  J  Brooking 

Mr  H  Edwards  -  Garrett  Torrance 
Mr  N  Bishop  -  Garrett  Torrance 
M/F  File 

Subject : 

Notes  on  visit  to  HOP 

to  discuss  Wright- 

■Patterson  Study 

A  visit  was  maJe  by  N  Bullock  to  the  MOL  Inspectorate  of  Flight  Safety  at 
Adastral  House,  Theobalds  Road,  WC1X  8RU  on  the  25th  November.  The  purpose 
of  the  visit  was  to  discuss  various  aspects  of  the  crash  survivable  recorder 
study  being  carried  out  for  the  'JS  Airforce  Systems  Command  Wright-Patterson 
Airforce  Base. 


Background 


- -  sketched  the  background  on  flight  recorders  to  the  present 

time.  He  said  that  because  of  the  cancellation  of  TSR2  and  the  P115L  the  RAF 
had  lost  a  generation  of  flight  recorders.  They  had  had  bad  experience  with 
wire  recorders  and  because  of  this  there  is  a  lot  of  prejudice  against  recorders 
in  general.  Currently  the  only  two  fighter  trainer  type  aircraft  which  have  recorders 
are  the  Hawk  whiph  has  a  Leigh  M10  data  only  recorder  and  the  Tornado  which  her  a 
Sperry  SCR200.  This  has  four  Lo  minute  tracks  giving  Lo  minutes  of  voice  and 
120  minutes  of  data  at  128  words  per  second, 10  plus  2  bit  words.  He  said  the 
present  system  only  uses  approximately  70  of  these  words,  but  I  know  from  speakin,- 
to  other  people  that  there  are  a  lot  of  different  demands  upon  the  spare  capacity. 

The  Jaguar  aircraft  being  supplied  to  the  Indian  Airforce  have  a  Sperry  SCH300 
which  has  six  30  minute  tracks  and  is  quite  flexible  in  operation.  It  appears 
that  the  tracks  can  he  allocated  in  such  a  way  to  change  the  ratio  of  voice  to 
data  time  and  according  to  - ; -  there  is  a  large  measure  of  flexi¬ 

bility  .in  the  acquisition  unit  to  cope  with  different  signal  types  and  sampling 
rates.  He  feels  that  this  is  an  essential  feature  to  build  into  any  new  design. 

Both  the.  H&wk  and  Tornado  recorders  are  being  modified  so  that  it  will  be 
possible  to  milk  them. The  milking  facility  isbeing  added  so  that  the  recorder 
serviceability  can  be  checked  but  also  to  provide  easy  means  of  extracting 
data  to  investigate  an  incident  .An  example  of  this  was  a  complaint  from  a  pilot 
that  an  engine  failed  to  re-light  and  an  expensive  investigation  procedure  which 
would  have  included  sending  the  engine  back  to  Rolls  Ro.vce  was  avoided  because 
the  data  on  the  recorder  showed  that  he  had  attempted  a  re-light  in  less  then 

the  stated  time.  -  chief  aim  at  present  is  to  get  the  RAf 

Jaguars  retrofitted  with  the  SCR300,  he  says  there  is  a  lot  of  resistance 
because  of  lack  of  space  on  the  aircraft,  because  of  the  cost  of  the  equipment 
(it  appears  that  they  only  look  at  the  cost  of  the  equipment  this  year  not  the 
savings  to  be  gained  by  not  losing  aircraft  and  pilotr'  over  succeeding  years), 
because  of  the  weight  penalty  (  from  the  operations  point  of  view)  because  there 
is  reluctance  amongst  pilots!  vho  are  very  influential  in  the  airforce) to  "gadgets" 
and  particularly  to  a  gadget  that  could  be  used  as  a  "spy  in  the  cab". 

Cost  Saving 


-  said  that  there  was  a  huge  potential  for  saving  money  by 

saving  accidents.  A  fully  trained  pilot  is  currently  worth  It  and  lj  million 
pounds,  a  navigator  about  a  million  pounds,  aircraft  cost  upto  eight  million 


Cont ' d . 
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pounds  added  to  which  there  is  the  cost  of  salvage  and  accident  investigation 
and  of  grounding  a  fleet  while  investigation  is  carried  out. Approximately  16 
Jaguar  aircraft  have  been  lost, in  9  cases  the  cause  is  unknown  or  proven. 

It  is  thought  that  in  most  cases  it  was  failure  of  the  navigation  equipment 
and  Sqd.  Ldr.  Stickley  feels  that  probably  25?  of  these  losses  could  have  been 
saved  had  an  accident  recorder  been  fitted.  The  cost  of  retrofitting  all 
Jaguars  would  be  saved  by  the  saving  of  one  aircraft. 

Voice 
■  1 - 

- -  - -  - - — —  view  is  that  voice  should  be  included,  he  said  that  it 

had  been  extremely  useful  on  the  two  Tornado  accident  investigations.  Only 
the  last  five  minutes  is  critical  but  it  is  very  useful  to  be  able  to  look 
back  further  and  see  whether  the  crew  had  been  under  stress  or  had  been  be¬ 
having  normally  prior  to  the  accident  situation  arising. 

Future  Aircraft 


- 1 — - '  view  is  that  future  aircraft  recorders  will  be  even  more 

necessary  than  they  are  now  because  where  an  electrical  control  system  fails 
there  will  be  no  evidence  in  the  wreckage  such  as  broken  control  rods  as  there 
is  in  the  mechanical  system  and  cathod  ray  cockpit  displays  mean  that  you  cannot 
determine  what  the  aircraft  was  doing  from  jammed  instrumentation. 

Replay 


- - . — . - .  feels  that  recorder  designers  pay  much  too  little  attention 

to  replay  equipment.  He  said  that  Slumberger  have  an  extremely  sophisticated 
3  dimensional. display  system  with  which  it  is  possible  to  reinact  the  behaviour 
of  the  aircraft  from  the  information  recorded.  Contact  on  this,  subject  would 
be  Lou  Levey  at  Boscombellown. 

Survivability 

- - -  did  not  have  any  firm  information  on  survivability  requirements, 

he  thought  that  Sqd.  Ldr.  Peter  Sharp  would  be  best  source  of  this  information.  He 
did  not  know  but  thought  that  Farnborough  had  probably  provided  the  information  to 
go  into  Procurement  Specification  in  this  respect.  His  feeling  is  that  the  surviva¬ 
bility  requirements  for  low  level  high  speed  military  aircraft  should  be  more  severe 
and  those  civil  aircraft. 

E.iectable  versus  Contained 

- is  fairly  open  minded  on  this  subject  but  has  a  preference  for 

ejectable  recorders  this  in  contrast  to  everybody  else  I  have  spoken  to.  I  got 
the  impression  that  his  opinion  might  be  more  subjective  than  scientific,  he 
showed  me  a  number  of  photographs  of  crashes  where  there  were  no  recognisable  parts 
left  of  the  aircraft  and  seemed  to  imply  that  a  contained  recorder  could  not  have 
survived.  He  also  said  that  when  an  aircraft  goes  very  fast  into  water  it  breaks 
up  to  such  an  extent  that  there  are  no  large  parts  left  to  which  the  recorder  could 
be  attached  and  the  recorder  being  heavy  tends  to  sink  into  the  mud.  In  contrast 
an  ejectable  recorder  can  be  picked  quickly  and  will  avoid  damage.  However,  Sqd. 

Ldr.  Sharp  of  Air  Eng  is  against  ejectable  recorders  because  of  the  extra  complexity 
of  the  various  water  heat  and  shock  sensors  that  are  necessary  to  release  them. 

This  complexity  can  either  lead  to  spurious  ejection  or  to  failure  to  eject  in  an 
accident.  One  of  the  German  Tornados  which  is  fitted  with  an  ejectable  recorder 
recently  lost  it  because  of  a  spurious  signal  from  the  heat  sensor.  However  the 
radio  beacon  on  the  recorder  worked  and  it  was  recovered  undamaged  also  the  air¬ 
craft  landed  quite  safely. 
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Duration 


- : - ; -  opinion  is  that  one  hour  is  adequate  for  crash  investi¬ 
gation  purposes.  He  said  that  in  his  experience  20  minutes  was  the  longest  time 
that  was  necessary,  however  it  is  nice  to  have  a  whole  flight  and  he  agreed  that 

take-off  is  useful.  The  RAF  have  had  five  fatal  accidents  in  the  last  two  weeks 

one  of  them  being  the  helicopter  winchmen,  in  the  other  four  cases  it  was  only  the 
last  few  minutes  of  information  that  was  relevant. 

Standardisation 

- - — —  view  is  that  in  practice  it  is  unlikely  it  will  be  possible 

to  produce  equipment  however  flexible  the  design  is  that  would  be  suitable  for 
both  transport  aircraft  and  fighter  trainer  aircraft,  his  view  is  that  transport 
aircraft  have  potential  space  to  accommodate  civil  equipments.  He  feels  that 
the  RAF  and  the  Navy  requirements  are  much  the  same.  Navy  aircraft 

are  somewhat  more  likely  to  crash  into  the  sea,  the  likelihood  of  this  in  an  RAF 

aircraft  depends  on  the  type  of  mission,  i.e.  whether  its  Air  Defencd.  He  feels 
that  both  cases  can  be  adequately  covered  by  the  use  of  an  ejectable  Recorder. 

\ 
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N  J  0  BULLOCK 
Project  Engineer 
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APPENDIX  H 

ANALYSIS  OF  USN  AIRCRAFT  CRASHES,  NAVAL  SAFETY  CENTER 


AIRESEARCH  MANUFACTURING  COMPANY 


DEPARTMENT  OF  THE  NAVY 
NAVAL  SAFETY  CENTER 
naval  air  station 

NORFOLK,  VIRGINIA  23511 


Commander,  Naval  Safety  Center 
Commander,  Naval  Air  Test  Center 


IN  REPLY  REFER  TO: 


1 1 A:gc 
3750, 

Ser  ^'356 
i  i  DEC  1980 


Subj:  Navy/Marine  Corps  Aircraft  Crash  Statistics 
Ref:  (a)  NAVAIRTESTCEN  ltr  ser  SY71/375  dtd  5  Nov  1980 

Enel:  fl|  Number  of  Aircraft 

(2)  Number  of  Aircraft  Recovered 

(3)  Number  of  Aircraft  for  Which  Mishap  Cause  was 
'Determi ned 

(4)  Number  of  Fatalities 

(5)  Number  of  Major  or  Minor  Injuries 

1.  Enclosures  (1)  through  (5)  are  forwarded  in  response  to 
reference  (a),  with  the  following  comments: 


a.  Information  concerning  depth  of  water  and  distance  from 
land  is  not  recorded  in  the  data  bank  mishap  record. 


b.  Information  concerning  number  of  aircraft  recovered  for 
accident  investigation  is  not  readily  available  and  would  require 
manual  research  of  micro  film  records. 


c.  Cost  of  aircraft  recovery  and  Investigation  is  not 
available.  Recommend  contacting  Commander  Naval  Sea  System 
Command,  Mr.  P.  Salmon,  Autovon  227-7386. 

d.  P-3,  KC-130  and  C-2  aircraft  have  been  equipped  with  FDR's. 
To  date  only  one  accident  provided  any  useful  information  from 

the  FDR  system. 


2.  The  enclosed  data  are  FOR  OFFICIAL  USE  ONLY  for  mishap  pre¬ 
vention  and  are  not  to  be  released  to  private  Interests  or  used 
for  any  other  purpose  without  the  written  permission  of  Commander 
Naval  Safety  Center. 


S.  P.  DUNLAP 

Head,  Aircraft  Operations  and 
Facilities  Division 
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Number  of  Aircraft 


ALL  NAVY/MARINE  AIRCRAFT  DESTROYED  IN  MAJOR  ACCIDENTS  CRASHED  INTO: 


CY 

1?75 

CY  1976 

CY 

1977 

CY 

1978 

CY 

1979 

CY  !980(Thru 

Model 

Land 

Water 

Land 

Water 

Land  Water 

Land  Water 

Land 

Water 

Land 

Water 

A-3 

1 

1 

A-A 

12 

A 

6 

A 

10 

A 

II 

5 

17 

2 

IA 

2 

A-5 

1 

A-6 

3 

6 

6 

2 

A 

2 

A 

6 

A 

5 

2 

5 

A-7 

5 

9 

5 

7 

3 

9 

A 

8 

5 

6 

2 

A 

C-l 

1 

1 

1 

TC-A 

1 

C-l  17 

1 

1 

C-l  18 

1 

1 

1 

EC- 130 

1 

C-l  33 

1 

E-2 

1 

1 

1 

F-A 

6 

8 

5 

11 

7 

7 

A 

A 

A 

8 

3 

6 

F-5 

1 

F-8 

1 

5 

A 

1 

3 

1 

1 

1 

F-l  A 

1 

3 

2 

A 

3 

6 

1 

9 

5 

1 

3 

QF-86 

1 

H-l 

A 

7 

5 

A 

1 

9 

5 

1 

H-2 

1 

1 

2 

2 

1 

1 

1 

2 

H-3 

2 

1 

1 

3 

A 

1 

2 

3 

H-A6 

1 

2 

A 

1 

1 

2 

3 

2 

3 

1 

2 

H-53 

3 

2 

1 

8 

A 

2 

2 

2 

H-57 

1 

P-3 

1 

2 

2 

1 

1 

S-2 

1 

1 

1 

1 

1 

S-3 

1 

2 

I 

1 

T-2 

1 

1 

3 

1 

1 

2 

A 

1 

1 

1 

T-28 

3 

1 

2 

1 

1 

1 

1 

T-33 

2 

T-3A 

1 

2 

3 

1 

1 

2 

A 

T-38 

1 

T-39 

1 

1 

T-AA 

1 

AV-8 

3 

2 

3 

5 

A 

3 

3 

1 

3 

1 

oy-io 

1 

X-26 

All 

52 

A2 

50 

38 

63 

Al 

53 

A9 

55 

39 

Al 

3A 

Models 
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Number  of  Recovered 


ALL  NAVY/NARINE  AIRCRAFT  DESTROYED  IN  MAJOR  ACCIDENTS  CRASHED  INTO: 


CY  1975 

CY 

1976 

CY 

1977 

CY 

1978 

CY 

1979 

CY  1980 
(Thru  Auq) 

Mode) 

Land  Uacer 

Land 

Uacer 

land 

Water 

Land 

Water 

Land 

Water 

Land  Water 

A-3 

1 

1 

A-4 

12 

6 

1 

10 

3 

11 

1 

17 

1 

14 

A-5 

A-6 

3 

6 

1 

4 

1 

4 

1 

4 

2 

A- 7 

5  ! 

5 

3 

2 

4 

2 

S 

1 

2 

C-l 

1 

1 

TC-4 

1 

c-l  1 7 

1 

C-l  18 

1 

1 

1 

EC- 130 

C-131 

1 

E-2 

1 

1 

1 

F-4 

6  1 

5 

1 

7 

2 

4 

1 

4 

3 

F-5 

1 

F-8 

1 

4 

3 

F-14 

1 

2 

2 

3 

3 

1 

2 

1 

QF-86 

1 

H-l 

4 

7 

5 

4 

1 

9 

5  1 

H-2 

1 

2 

1 

1 

1 

H-3 

1 

3 

1 

1 

1 

H-46 

1  1 

4 

1 

1 

3 

1 

2 

1 

H-53 

3 

2 

8 

4 

2 

2 

2 

H-57 

1 

P-3 

1 

2 

1 

1 

S-2 

1 

1 

1 

1 

S-3 

1 

1 

T-2 

1 

1 

1 

1 

1 

4 

1 

T-28 

3 

1 

2 

1 

1 

1 

T-33 

2 

T-34 

2 

3 

1 

1 

2 

4 

T-38 

1 

T-39 

1 

1 

T-44 

1 

AV-8 

3 

2 

2 

5 

1 

3 

3 

1 

3 

OV-IO 

1 

X-26 

All 

f - 

52  3 

50 

11 

62 

13 

53 

13 

55 

9 

41  3 

[2.  ) 
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Number  In  Which  Causal  Factors  Were  Determined 


ALL  NAVY/MARINE  AIRCRAFT  DESTROYED  IN  MAJOR  ACCIDENTS  CRASHED  INTO: 


CY  1980 


CY 

1975 

CY 

1976 

CY 

1977 

CY  1978 

CY 

1979 

(Thru  Aug) 

Model 

Land 

Water 

land 

Water 

Land 

Water 

Land 

Water 

Land 

Water 

Land  Water 

A- 3 

R 

i 

A-4 

12 

3 

6 

4 

10 

2 

9 

3 

16 

2 

12  1 

A- 5 

1 

A-6 

3 

4 

6 

2 

3 

1 

3 

5 

1 

1  4 

A-7 

5 

8 

5 

5 

3 

6 

2 

6 

5 

4 

1  1 

C-l 

1 

TC-4 

1 

C-l  1 7 

1 

1 

C-l  18 

1 

1 

1 

EC- 130 

C-l  31 

1 

E-2 

1 

1 

1 

F-4 

6 

6 

3 

9 

7 

6 

4 

4 

3 

5 

3  6 

F-5 

1 

F-8 

1 

4 

3 

1 

3 

F-14 

1 

3 

2 

4 

3 

6 

1 

7 

4 

1  3 

QF-86 

1 

H-l 

4 

7 

5 

3 

1 

9 

5  1 

H-2 

1 

1 

2 

2 

1 

1 

2 

H-3 

2 

1 

1 

2 

4 

2 

3 

H-46 

1 

2 

4 

1 

1 

2 

3 

2 

3 

1  2 

H-53 

3 

2 

1 

7 

3 

2 

2 

2 

H-57 

1 

P-3 

1 

2 

1 

1 

1 

S-2 

1 

1 

l 

1 

1 

S-3 

1 

1 

I 

T-2 

1 

1 

3 

1 

1 

4 

1 

1 

T-28 

3 

1 

2 

1 

1 

1 

T-33 

2 

T-34 

1 

2 

3 

1 

1 

2 

3 

T-38 

1 

T-39 

1 

1 

T-44 

1 

AV-8 

2 

2 

3 

4 

3 

2 

3 

3 

OV-IO 

1 

X-26 

All 

Si 

35 

46 

34 

60 

31 

43 

38 

47 

26 

34  26 

Model s 


Ei-iCLCS  J?.£  (5 ) 
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Number  of  Fatalities 


ALL 

NAVY/MARINE 

CY  1975 

AIRCRAFT  DESTROYED  IN  MAJOR  ACCIDENTS  CRASHED  INTO: 

CY  1976  CY  1977  CY  1978  CY  1979 

CY  1980 
(Thru  Auo) 

Model 

Land 

Water 

Land 

Water 

Land  Water 

Land 

Water 

Land 

Water  Land  Water 

A-3 

2 

2 

A-4 

3 

3 

1 

1 

1 

2 

4 

3 

3 

4 

5  2 

A-5 

2 

A-6 

3 

5 

3 

4 

3 

2 

7 

4 

7 

12 

2  5 

A-7 

1 

1 

2 

5 

1 

6 

1 

5 

2 

2 

1  2 

C-l 

6 

3 

4 

TC-4 

9 

C-l  1 7 

2 

C-l  18 

16 

EC- 130 

16 

C-l  3> 

4 

E-2 

5 

1 

F-4 

1 

7 

5 

9 

8 

5 

2 

2 

7 

4 

F-5 

F-8 

1 

1 

1 

F-14 

4 

2 

1 

1 

5 

4 

2 

QF-86 

1 

H-l 

15 

4 

4 

3 

H-2 

2 

3 

1 

5 

H-3 

1 

8 

5 

8 

H-46 

3 

5 

4 

1 

1 

2 

9 

6 

3 

4 

H-53 

9 

4 

4 

32 

7 

3 

7 

H-57 

P-3 

13 

8 

12 

S 

7 

S-2 

2 

2 

2 

S-3 

4 

4 

2 

1 

T-2 

1 

2 

1  1 

T-28 

2 

2 

1 

T-33 

T-34 

2 

1 

1 

1 

4 

T-38 

2 

T-39 

2 

5 

T-44 

AV-8 

2 

I 

2 

2 

1 

1 

1  1 

OV-IO 

2 

X-26 

All 

38 

28 

48 

25 

77 

4» 

85 

43 

33 

41 

33  37 

Models 

f*.r" 

HE  (V) 

AIRESEARCH  MANUFACTURING  COMPANY 


81-17693 
Page  H-5 


Number  B  and  F  Injuries 


ALL  NAVY/NARINE  AIRCRAFT  DESTROYED  IN  MAJOR  ACCIDENTS  CRASHED  INTO: 

CY  1980 


CY 

1975 

CY  1976 

CY 

1977 

CY 

1978 

CY  1979 

(Thru  Auq) 

Model 

Land 

Water 

■BE 

Land  Water 

A- 3 

A-4 

6 

1 

4 

2 

7 

3 

l 

9 

4 

A- 5 

1 

A-6 

7 

9 

6 

2 

2 

l 

6 

1 

1 

A-7 

2 

3 

1 

1 

2 

2 

II 

1  1 

C-l 

2 

TC-4 

C-l  17 

4 

7 

C-l  18 

2 

EC- 130 

C-l  31 

2 

E-2 

2 

F-4 

2 

3 

8 

5 

2 

3 

2 

2 

F-5 

F-8 

1 

1 

F-14 

4 

7 

4 

2 

3 

4 

1 

QF-86 

H-l 

2 

5 

II 

5 

13 

5 

H-2 

2 

2 

H-3 

2 

4 

3 

1 

H-46 

4 

12 

2 

2 

2 

2 

2 

H-53 

4 

3 

16 

9 

10  1 

4 

H-57 

P-3 

10 

9 

I 

S-2 

2 

2 

S-3 

1 

T-2 

1 

2 

1 

3 

1 

T-28 

2 

1 

T-33 

T-34 

3 

2 

1 

T-38 

T-39 

T-44 

2 

AV-8 

1 

1 

1 

1 

3 

2 

OV-IO 

X-26 

AM 

34 

26 

43 

21 

57 

13 

27 

45 

40  13 

21  11 

Models 

ENCLOSURE  {£) 
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APPENDIX  I 

ACCIDENT  RECORDING  TIME  DISTRIBUTION  GRAPH  AND  NTSB  COMMENT  LETTER 
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National  Transportation 
Safety  Board 

Washington, DC  20594 
November  3,  1980 


Mr.  Norman  W.  Bishop 
Normalair  -  Garrett,  Ltd. 

56  Heather  Hill  Lane 
Woodcliff  Lake,  New  Jersey  07675 

Dear  Mr.  Bishop: 

Thank  you  for  your  letter  of  October  27,  1980. 

Regarding  the  graph  you  sent,  “Accident  Recording  Time  Distribution 
(Data  from  National  Transportation  Safety  Board),"  whoever  collected 
those  data  never  contacted  me  or  anyone  else  at  NTSB  of  whom  I  am  aware. 

Although  the  amount  of  data  that  appears  in  NTSB  reports  is  probably 
reflected  accurately  in  the  graph,  it  does  not  reflect  the  amount  of 
data  that  we  actually  read  and  evaluate  during  an  accident  investigation. 
We  usually  go  back  to  the  previous  takeoff  and/or  landing,  since  these 
data  prove  to  be  valuable  references.  When  parameters  are  behaving 
abnormally  during  an  accident  scenario,  the  question  becomes:  "Is  it 
because  the  DFDR  is  not  working  properly  or  because  an  accident  is 
happening?"  This  question  can  be  answered  with  certainty  only  if  prior 
takeoff  and  landing  data  are  available  for  "calibration  purposes." 

Although  NTSB  recommendation  letter  A-78-27  through  29  calls  for  a 
recorder  of  10-15  minutes  duration,  it  has  been  our  experience  that  it 
is  necessary  to  have  a  DFDR  record  of  the  last  takeoff  and  landing  prior 
to  the  accident,  as  well  as  a  record  of  the  preflight  exercise  of  flight 
controls  to  maximum  deflection.  Since  microprocessors  permit  recording 
of  the  prior  takeoff  and  landing  data  on  a  selective  storage  basis,  the 
entire  time  between  these  events  and  the  accident  need  not  be  recorded. 
Hence,  10-15  minutes  of  the  last  data  are  sufficient,  if  the  prior 
takeoff,  landing,  and  preflight  control  exercise  are  also  stored. 

The  last  comment  --  some  vendors  seem  to  be  taking  the  10-15  minute 
figure  as  an  absolute,  rather  than  as  a  minimum.  It  has  been  difficult 
to  convince  some  tape  recorder  people  that  it  i£  okay  if  they  have  a 
1/2-hour  or  an  hour  tape.  (Using  tape  recorders,  it  doesn't  cost  anything 
to  do  this). 
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Are  you  aware  that  FAA  has  decided  to  turn  over  further  development 
of  the  TSO  on  flight  recorders  to  SAE?  Perhaps  this  would  be  of  interest 
to  your  organization. 


Sincprely  yours. 


Carol  A.  Roberts 

Chief,  Laboratory  Services  Division 
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PERCENT  OF  ACCIDENTS 


ACCIDENT  RECORDING  TIME  DISTRIBUTION 
(DATA  FROM  NATIONAL  TRANSPORTATION  SAFETY  BOARD) 
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DEVELOPMENT  REPORTS  ON  CRASH  PROTECTION  TESTS 

I 

I 
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I 

I 
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development  rep 


NORMALAJR— GARRETT  LIMITED 

YEOVIL  IOMEKSET  CNGLANO  **20  2Y0 

Telephone  Ypovit  (Coct  0935)  5181 
Tit*  48132 

TpitQnms  NGL  TpttK  Y4ow) 


REPORT  NUMBER  13C5  V  DVB12 


title  Fire  Protection  Test 


p*rt  number  1203VOOO 


Prepared  by 


J  3  WALMSLIY  n/ 


date. 


IP-  re pr.  tvr* 


Checked  by 


J&llM.  d- 


J  F  -TORTKKOP 


*»jjLQx£L&. 


Approved  by 


.  v  • 


date  '  -  '  ^  •' 


W  H  JENKINS 

/ 


Deriod  of  tests 


circulation 

full  version  .  limited  version 

Mr  D  Hooper 
Mr  V  Jenkins 
Mr  S  Strange 
Mr  J  Her.shav 
Mr  J  Northrcp 
Mr  H  Edwards 
Mr  P  Turing 
Mr  V  Davies 
File 


<0  Norm«U«-CwT*ti  In. 

1.0*8  ■  11-7-71  a  W.G 
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_ development  repo 

summary 

customer  Bendix  Corporation 
customers  specification  TS0-C51A 
build  standard  at  receipt 
part  number  1203V000 

serial  number 
mass 

approximate  overall  dimensions 

type  approval  test  schedule  number  issue  number 

N/A 

production  test  schedule  number  issue  number 

N/A 

type  approval  test  schedule  references 

N/A 

purpose  of  test 


application  FI 3  recorder 
issue  number 

issue  number 


date  of  test  commencement  11th  Sept  1980  conclusion 
conclusions 

Although  the  test  item  was  not  to  the  final  preferred  design  of  protective  cover, 
i -e-  NGL  Drg.  No.  2C02EhO2,  and  also  had  not  undergone  the  preliminary  Shock  Test 
and  Crush  Test,  results  achieved  from  this  Fire  Test  and  previous  Penetration  Test 
lead  to  the  anticipation  that  this  current  design  of  crash  protection  will  meet 
the  requirements  of  USA  Federal  Specification  TS0-C51A,  particularly  in  view  of 
the  extended  time  of  the  Fire  Test, 


"I 
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development  re 


P 


NOHMAL-AIR— GARRETT  LIMrTED 
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Purpose  of  Test 


To  carry  out  a  Fire  Protection  Test  to  para.  7.3.5  of  USA  Federal 
Specification  TS0-C51A  on  a  dummy  test  container  made  to  NGL  Work¬ 
sheet  Nos.  NWS-L760  and  L761  which  had  already  undergone  a  Pene¬ 
tration  Test  to  para.  7.8.3  of  the  same  specification  for  which 
see  NGL  Development  Test  Report  So.  1305V  DVRI1. 

Details  of  Item  Tested 


The  Test  container,  see  Fig.  1,  already  had  a  3/16  inch  thick 
coating  on  the  end  face  of  Chartek  5?,  an  intumescent  fire  resis¬ 
ting  coating  supplied  by  the  AVCQ  Corp.  of  Lowell,  Mass.,  USA. 

See  Fig.  2. 

Prior  to  fire  testing,  therefore,  similar  coats  of  Chartek  59  were 
trowelled  on  to  the  other  four  faces  to  a  thickness  of  3/16  inch. 

These  also  included  m=cal  mesh  reinforcement,  see  Fig.  3.  This 
coating  was  also  trowelled  over  the  exposed  end  flanges  to  an 
average  thickness  of  about  1  inch. 

A  TTM  body  assembly  with  a  spool  of  pre-recorded  Kapton  tape  inside 
it  was  positioned  inside  the  test  container  and  held  away  from  it 
using  j  inch  thick  bands  of  silicone  rubber  to  simulate  the  effect 
of  the  anti-vibration  mounts  which  will  be  Silicone  rubber.  Due  to 
the  dent  caused  by  the  previous  Penetration  Test,  barely  1/16  inch 
separated  the  apex  of  the  dent  from  the  TTM  body  assembly.  No 
actual  hole  had  been  pierced  in  the  container  and  this  gap  was 
maintained  by  a  silicone  rubber  pad  and  a  similar  pad  was  fitted 
between  the  TTM  body  and  the  base  plate,  Fig.  U.  - 

Four  thermocouples  were  incorporated  into  the  test  assembly.  One 
was  welded  to  the  inside  of  the  container  on  a  V  by  4"  face  as  near 
to  the  dent  as  a  welding  torch  would  reach.  Another  was  suspended 
in  the  air  gap  between  the  container  and  the  TTM  body. A  third  was  bolted 
to  the  inside  metal  face  of  the  TTM  main  body  and  a  fourth  was  sus¬ 
pended  in  the  air  space  within  the  TTM  adjacent  to  the  tape. 

As  a  cross  check  in  the  case  of  thermocouple  failure  during  the 
fire  test,  a  variety  of  temperature  sensitive  paints  were  coated 
over  selected  portions  of  the  TTM  main  body  in  the  tape  air  space. 

These  permanently  change  colour  if  thejr  particular  temperature  is 
exceeded.  These  covered  the  range  205  C  to  LOO  C. 

Prior  to  assy,  a  15  kHz  digital  signal  was  recorded  on  the  Kapton 
tape . 

Finally,  all  reasonable  steps  were  taken  to  seal  the  TTM  from  the 
surrounding  air  with  the  exception,  perhaps,  of  a  pinhole  leak 
where  two  thermocouples  emerged  from  the  TTM  body. 

Details  cf  Test  Set-up  (Fig.  5  refers) 

The  test  item  was  placed  on  a  hearth  made  up  of  3  inch  thick  fire¬ 
bricks  .  The  thermocouples  were  led  out  through  a  gap  between  the 
bricks,  this  gap  being  filled  with  dry  sand.  Further  sand  was 
sprinkled  over  the  edges  of  the  flange  and  baseplate  to  prevent 
any  flame  from  impinging  directly  on  the  bare  metal  edges.  Further 
firebricks  surrounded  three  sides  of  this  set-up  to  contain  the 
heat . 
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Only  t vo  torches  were  available,  one  butane,  the  other  propane. 
These  were  arranged  so  that  one  was  aimed  at  the  face  directly 
above  the  thermocouple  veldea  to  it,  the  other  being  positioned 
at  U5  degrees  downwards  so  that  it  heated  two  faces  and  one  edge, 
the  upper  face  being  that  which  had  suffered  the  prior  pene¬ 
tration  test.  Fig.  5  shows  the  arrangement  prior  to  ignition. 

The  thermocouples  were  attached  to  a  WATAKABE  6  channel  potent- 
iometric  pen  recorder.  This  recorded  in  millivolts,  the  actual 
temperatures  being  deduced  from  standard  tables  appropriate 
to  the  thermocouples  metals  used.  A  fifth  thermocouple  recorded 
flame  temperatures  at  the  start  and  finish  of  test  about  5  inch 
from  the  intumescent  coating. 

The  test  was  conducted  inside  a  large,  draught-free  hanger. 
Details  of  Fire  Test 


The  pen  recorder  was  set  running,  the  burners  ignited  and  the 
time  noted.  After  about  5  minutes  the  coating  had  swelled  about 
j  inch  where  it  was  directly  under  the  flame  and  where  small 
areas  glowed  red.  After  15  minutes  the  coating  had  not  notice¬ 
ably  swelled  much  more  but  the  size  of  the  incandescent  areas 
had  increased.  Also,  the  recorded  temperatures  inside  the  TTM 
had  barely  reached  90°C  so  the  test  was  allowed  to  continue. 

After  30  minutes  the  size  of  the  glowing  red  areas  had  further 
increased  but  the  coating  had  not  swelled  any  more  and  the  tem¬ 
perature  of  the  thermocouples  in  the  air  space  adjacent  to  the 
tape  had  reached  only  17«  C,  so  the  burners  were  left  running. 

After  ho  minutes  it  was  considered  that  the  test  had  exceeded 
the  requirements  and  the  burners  were  turned  off  after  checking 
that  the  flame  temperatures  were  both  still  at  1295  C  and  that 
the  tape  air  space  temperature  had  reached  216  C. 

The  pen  recorder  was  left  running  for  a  further  26  minutes  to 
measure  the  heat  soak  and  temperature  run-down  during  which  time 
the  tape  air  space  temperature  peaked  at  229  C  after  U7  minutes 
before  slowly  reducing  to  132  C  after  66  minutes.  Fig.  6  shows 
the  test  in  progress  at  30  minutes  and  Figs.  7  and  3  show  the 
test  item  after  test  and  before  strip  examination.  Fig.  9 
shows  the  time /temperature  results  achieved,  the  tape  deck 
metal  and  tape  air  space  temperatures  being  too  close  together 
over  the  whole  test  to  be  distinguished. 

7 .Yam'i  nation  After  Test 


To  reach  the  nuts  holding  the  base  plate  it  was  necessary  to  cut 
into  the  edge  of  the  charred  Chartek  59-  This  proved  to  be  fair¬ 
ly  firm  to  the  touch  but  broke  away  easily  in  a  light,  friable 
manner  wnen  a  box  spanner  was  applied.  It  was  noticed  that  sur¬ 
face  cracks  had  developed  in  the  char  within  2^  hours  of  the  end 
of  test. 
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On  withdrawing  the  TTM  body  from  the  test  container  the  silicone 
rubber  bands  vere  found  to  be  in  good  condition  although  the 
peak  skin  temperature  had  reached  330  C  after  10}  minutes.  Also 
the  thermocouple  had  remained  welded  to  the  case. 

The  inside  of  the  test  container  had  turned  a  light,  golden 
colour  in  places  and  was  sticky  to  the  toucn.  Also  the  outside 
of  the  sealed  TTM  body  assy,  had  turned  a  dark,  golden  brown  but 
was  not  sticky.  It  is  suggested  that  this  might  have  been  due 
to  the  cyanoacrylate  ester  type  Loctite  used  to  stick  the  silicone 
rubber  to  the  TTM  body  as  an  assembly  aid. 

On  removing  the  tape  cover,  the  tape  space  inside  was  found  to  be 
as  clean  as  before  test.  Of  the  five  temperature  sensitive  paints 
used,  one  confirmed  the  peak  deck  temperature  of  228°C,  one  gave 
an  ambiguous  result  and  the  other  three  were  unaffected. 

On  replaying  the  tape  which  had  been  recorded  on  a  Sony  low  noise 
recorder  on  tracks  1  and  3,  it  was  found  that  output  was  low  and 
varied  along  the  tape  with  the  lowest  putput  on  track  3  at  about 
20  dB  loss.  Signal  transitions  were  counted  before  and  after  test. 

Of  these,  97.75  were  recordered  from  track  1  and  99.75  from  track  3- 
This  was  achieved  using  a  counter  threshold  approximately  23  dB 
below  nominal  signal  level  from  new  tape.  Amplitude  modulation 
was  present  due  to  variable  spacing  loss  (tape  to  head).  This 
was  due  to  layer  transfer,  backing  to  oxide,  which  was  severe  near 
the  centre  of  the  spool.  The  lowest  output  was  at  t;.e  inner  end 
of  the  tape. 

The  outer  layers  of  tape  were  in  good  condition  but  there  was  pro¬ 
gressive  layer  to  layer  adhesion  towards  the  centre  of  the  spool. 

There  was  also  a  fairly  'uniform  transfer  of  carbon  coating  to  oxide, 

causing  the  spacing  loss  on  playback.  Removal  of  carbon  coating 
from  the  oxide  using  a  solvent  (PR0FAE-2-0I, )  over  a  small  section 
confirmed  this,  the  output  increasing  over  the  cleaned  section. 
Preconditioning  the  tape  at  the  comparatively  dry  value  of  305  RE  at 
20  C  for  12  hrs  prior  to  test  might  have  imprcved  the  playback  perfor¬ 
mance  but  this  was  not  carried  out  in  this  instance. 

Pre-test  original  output :- 
Track  1:-  2“50  mV  peak  to  peak 

Track  3:-  3300  mV  peak  to  peak 

Post-test  final  output :- 
Track  1:-  11,0  -  **00  mV  peak  to  peak 
305  amplitude  modulation 
Track  3:-  350  -  300  mV  peak  to  peak 
20*  amplitude  modulation 


Conclusions 

Although  the  test  item  was  not  to  the  final  preferred  design  of  protectiv 
cover  i.e.  uGL  Org  :!o  2002IA92,  and  also  had  not  undergone  the  preliminar 
Shock  Test  and  Crush  Test,  results  achieved  from  this  Fire  Test  and  pre¬ 
vious  Penetration  Test  lead  to  the  anticipation  that  this  current  design 
of  crash  protection  will  meet  the  requirements  of  USA  Federal  Specifi¬ 
cation  TS0-C51A  particularly  in  view  of  the  extended  time  of  the  Fire 
Test. 
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development  repo 


summary 

customer  3endix  Corporation  application  FiS  Recorder 

customers  specification  TS0-C51A  issue  number 

build  standard  at  receipt 

part  number  2002  Z  U92  issue  number  — 


serial  number  — 
mass 

approximate  overall  dimensions 
type  approval  test  schedule  number 

S/A 

production  test  schedule  number 

S/A 

type  approval  test  schedule  references 
N/A 

purpose  of  test  To  carry  out  penetration  resistance  tests  to  paragraph  7.8.3  of  the 
'JSA  Federal  Specification  TS0-C51A,  on  two  dummy  test  cases,  generally  to  NGL  drawl 
number  2002EU92.  These  were  made  to  NGL  worksheet  numbers  NWS  1*760  and  NWS  «76l. 

date  of  test  commencement  Uth  September  80  conclusion  5th  September  30 

conclusions 

The  case  design  is  adequate  to  satisfy  the  requirements  of  the  penetration  test. 

As  regards  the  fire  test  still  to  be  carried  out,  no  open  hole  was  caused  by  the 
spike,  neither  dia  the  case  split  and  the  fire  protecting  intuaescent  paint  remair.e 
intact  with  no  cracks. 


issue  number 


issue  number 
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Penetration  Tests 


Purpose  of  test 


To  carry  out  penetration  resistance  tests  to  paragraph  7.3.3  of 
the  USA  Federal  Specification  TS0-C51A  on  two  dummy  test  cases, 
generally  to  NGL  drawing  number  200221*92.  These  were  made  to 
NGL  worksheet  numbers  MVS  k760  and  NWS  k76l. 

Test  set  un 

The  drop  tower  used  was  of  British  Aerospace  manufacture  and  com¬ 
prised  a  rail-guided  circular  carriage  about  30  inches  in  diameter. 

This  could  be  raised  to  any  desired  height  up  to  about  20  feet  and 
was  released  electrically  by  a  standard  bomb  release  hook. 

The  test  cases  were  in  turn  placed  on  a  bed  of  dry  sand  to  Specifi¬ 
cation  DEF-133  paragraph  10.2.  This  sand  is  essentially  similar  to 
that  known  as  Sedhill  65,  supplied  by  British  Industrial  Sand  Ltd, 
Stoke  on  Trent,  Staffordshire,  which  was  preferred  but  not  available. 

It  was  contained  in  a  50  gallon  oil  drum  which  was  approximately  2k 
inches  diameter  by  2k  inches  deep. 

The  USA  Federal  Specification  TS0-C51A  paragraph  7.3.3  calls  for  a 
500  lbs  weight  steel  bar  to  be  dropped  from  a  height  of  10  feet, 
with  the  point  of  contact  having  an  area  not  greater  than  .05  square 
inches  (0.252  diameter).  This  gives  an  impact  energy  of  500  x  10  * 
5000  ft  lbs.  The  carriage  and  3pike  used  weighed  a  total  of  639  lbs, 

30  to  maintain  the  same  impact  energy,  the  carriage  was  dropped  from 
a  height  of  5000/639  feet  *  7.325  feet.  The  impact  spike  used  is  shown 
in  Fig  1  and  was  screwed  into  a  2  inch  diameter  by  10  inches  long  mild 
steel  bar  extending  downwards  from  the  carriage. 

Both  still  and  high  speed  cine  photography  at  koo  frames  per  second 
were  available  and  these  were  both  used  before,  during  and  after  each 


Test  Oetails 

The  test  assembly  used  for  Tests  1  and  2  contained  a  TTM,  within 
which  were  two  tape  spools  mounted  on  shafts ,  together  with  a  full 
length  of  Kapton  tape  wound  on  one  spool,  about  2  feet  of  the  free 
end  being  wrapped  round  stand-off  bolts  and  fastened  to  the  empty 
spool,  thus  duplicating  the  "end  of  tape”  condition.  Prior  to  te3t 
a  digital  signal  was  written  on  tape  tracks  1  and  3,  (of  3237  flux 
changes  per  inch)  this  being  equal  to  a  15  KHz  signal  at  normal 
recording  speed  used  in  the  F18  system.  The  TTM  was  held  in  the 
centre  of  the  surrounding  test  casing  by  3/16  inch  thick  expanded 
polyurethane  foam,  to  simulate  the  effect  of  the  anti -vibration 
mounts.  On  the  outside  of  the  test  case  a  3/16  inch  thick  layer  of 
intumescent  paint,  "Chartek  59”  with  expanded  metal  reinforcement, 
(see  Fig  2)  was  applied  to  the  face  chosen  to  be  subjected  tc  the 
penetration  test.  The  impact  point  chosen  for  the  test  was  estimated 
to  produce  the  maximum  possible  tape  damage,  and  was  marked  on  the 
outer  case  with  a  red  X. 
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The  test  assembly  used  for  Test  3  contained  a  solid  aluminium  alloy 
block  1  inch  shorter  than  the  inside  depth  of  the  case.  This  block 
vas  located  in  the  centre  of  the  case  volume  by  3/16  inch  thick  foam 
round  the  sides  and  by  J  inch  thick  foam  at  the  ends  in  the  direction 
of  impact.  This  1  inch  dimension  vas  chosen  as  being  the  approximate 
amount  the  real  case  could  be  expected  to  deform  by  crushing  the  com¬ 
paratively  veak  latch  and  connector  assemblies  before  meeting  the  solid 
TTM  case,  thus  preventing  further  deformation.  This  case  also  had  a 
3/16  inch  thick  layer  of  intumescent  paint  with  expanded  metal  rein¬ 
forcement  over  the  chosen  impact  area,  see  Fig  3. 

Fig  1  shows  a  general  view  of  the  test  rig  prior  to  test. 

Test  Results 


See  Figs  5,  6  and  7.  These  show  that  the  spike,  which  was  aimed  to¬ 
wards  one  side  of  the  case,  simply  tipped  it  over  in  the  sand  and 
then  slid  past,  being  brought  to  rest  by  the  top  of  the  50  gallon 
oil  drum  which  vas  considerably  deformed  as  will  be  seen  in  Fig  6. 
The  test  item  merely  suffered  a  slight  dent  and  the  local  removal 
of  intumescent  paint  down  to  the  expanded  metal  reinforcement . 


Test  1  vas  declared  invalid  as  the  object  of  the  test  was  to  find 
out  just  how  much  damage  the  case  could  sustain. without  loss  of 
ability  to  recover  tape  data.  To  this  end  a  5  ihch  thick  by  1 
inches  by  7  inches  steel  plate  was  interposed  between  the  test 
case  and  the  sand,  with  the  spike  aiming  point  at  the  centre  of 
this  area,  to  prevent  the  test  ca3e  from  tipping  over  again.  Test 

I  was  then  repeated  and  results  are  shown  in  Figs  6,  5,  10,  11,  12 
and  13.  From  these  it  will  be  seen  that  the  spike  did  not  penetrate 
the  steel  cover  but  produced  a  local  dent  in  the  tape  spool.  When, 
the  tape  was  subsequently  replayed  it  was  found  that  the  indentation 
of  the  reel  flanges  causing  deformation  of  the  tape  pack  once 
per  revolution,  gave  a  momentary  reduction  of  signal  level  of  11  dB. 
The  duration  of  the  effect  where  the  signal  was  beiow  95J  of  its 
normal  value  was  50  ms  at  a  tape  velocity  of  7.5  IPS.  The  tape  vas 
played  back  on  the  identical  equipment  used  for  writing  the  initial 
signal.  This  comprised  a  twin  capstan  transport  with  an  intercapstan 
tension  of  3.5  cz  (0.97H),  using  the  edge  track.  Reduced  drop  out 
depth  could  be  achieved  using  much  higher  tension  in  the  tape  but 

a  special  tape  transport  would  be  required  for  this  purpose.  The 

II  dB  drop  out  is  caused  purely  by  head  to  tape  contact  effects. 
Pre-annealing  the  tape  at  high  temperature  may  stress  relieve  the 
deformed  portions.  This  is  another  method  of  improving  the  perfor¬ 
mance  of  a  damaged  tape.  Figs  11  ar.d  15  show  photographs  of  a  typical 
normal  tape  and  the  section  of  deformed  tape  from  the  tape  spool  used 
during  the  penetration  test. 


In  this  test,  the  case  was  expected  to  crumple,  leaving  the  TTM 
intact.  Figs  16,  17,  18,  1?,  2C  and  21  show  that  slight  bulging  at 
the  sides  occurred  together  with  a  deep  dent  in  the  penetrated  face, 
which  was  pushed  in  approximately  j  inch.  The  spike  did  not  puncture 
the  test  case,  but  caused  a  slight  dent  in  the  solid  Aluminium  block. 
See  Figs  22  and  23  .  Fig  21  shows  the  condition  of  the  S-130  steel 
impact  spike  after  completion  of  the  above  3  tests.  Fig  25  shows 
an  Approved  Test  House  Certificate  for  the  3  tests  carried  out  and 
was  issued  by  British  Aerospace. 
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Conclusion 


The  case  design  is  adequate  to  satisfy  the  requirements  of  the 
penetration  test.  As  regards  the  subsequent  fire  test,  still  to 
be  carried  out,  no  open  hole  was  caused  by  the  spike,  neither  did 
the  case  split  and  the  fire  protecting  intumescent  paint  remained 
intact  with  no  cracks. 
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Purpose  of  testa 


To  discover  the  highest  soak  temperature  after  vhich  recorded  data 
may  still  be  recovered  from  Graham  thermo  do 5  Kapton  based  and 
Ampex  ”97  Mylar  based  recording  tapes .  Tests  on  itylar  tape  vere 
carried  out  to  cover  the  possibility  of  Kapton  tape  becoming 
unavailable  in  the  future.  These  tests  are  a  continuation  of  the 
initial  high  temperature  tests  covered  by  Development  Report 
1305V  DVB9. 

Test  set  up 


Kaoton  tape  Test  No.  1  (tapes  A  and  31 

Tvo  fully  loaded  spools  of  Xapton  recording  tape,  each  having  a  dig¬ 
ital  signal  at  3200  FCI  written  on  tracks  2  and  d,  vere  fitted  onto 
spool  shafts  inside  a  dummy  TTM  body.  Tvo  thermocouples  vere  fed 
into  the  sealed  body  through  a  sealing  plate  and  vere  attached  to  the 
spool  hubs  to  monitor  the  correct  temperature  inside  the  TTM.  The 
assembly  vas  then  placed  inside  an  oven,  the  temperature  being  raised 
from  ambient  to  doo  C  as  quickly  as  possible  and  alloved  to  stabilise 
for  1  hour.  The  oven  was  then  switched  off  and  the  assembly  alloved 
to  cool  back  to  ambient .  Both  tapes  vere  replayed  in  an  attempt  to 
recover  the  data.  Results  are  recorded. 

Oven  time /temperature  graph  for  Kapton  tape  tests  is  shown  in  Fig  1. 
Mylar  tape  Test  No.  2  ftaoe  E) 

Using  only  1  fully  loaded  spool  of  Mylar  recording  tape,  test  1  was 
repeated.  Jtylar  tape  has  a  polyester  base  and  tends  to  change  pro¬ 
perties  at  high  temperatures.  Accordingly  the  tests  on  Mylar  tape 
were  conducted  at  aolcver  temperature.  The  temperature  was  raised 
from  ambient  to  IdO  C  then  allowed  to  stabilise  for  1  hour,  before  • 
being  alloved  to  cool  back  to  ambient.  The  tape  vas  then  replayed 
to  try  and  recover  the  data.  Results  are  recorded. 

Oven  time /temperature  graph  for  ftylar  tape  tests  is  shown  in  Fig  2. 

Test  .’Jo.  2  vas  repeated  using  another  fully  loaded  spool  of  Mylar 
recording  tape  (tape  D)  but,  for  this  test,  the  soak  temperature 
vas  limited  to  110  C.  After  cooling  to  ambient,  the  tape  vas  again 
replayed  for  data  recovery.  Results  are  recorded. 

Kaoton  tape  Test  No.  3  'tate  0] 

A  third  loaded  spool  of  Kapton  recording  tape  vith  the  same  digital 
signal  used  in  the  previous  tests  vas  placed  into  a  circular  Alum¬ 
inium  alloy  sealed  housing,  simulating  the  inside  air  volume  of  a 
TTM.  A  tnermocouple  vas  fed  through  a  3mall  hole  in  the  top  of  the 
housing  and  attached  to  the  spool  hub  for  temperature  readings 
irside  the  test  housing.  The  housing  vas  placed  inside  ar.  over., 
the  temperature  being  raised  from  ambient  to  300  0  and  then  allowed 
to  stabilise  for  1  hour.  The  housing  vas  then  alloved  tc  cool, 
after  which  data  recovery  vas  carried  out.  Results  are  recorded. 
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Mvlar  tape  Test  Sc.  U  (tape  FJ 

Using  a  third  loaded  spool  of  Mylar  recording  tape,  test  3  was 
repeated  with  the  soak  temperature  limited  to  120°C.  After  cooling 
to  ambient  data  recovery  was  carried  out.  Results  are  recorded. 

Equipment 

1.  cOU9K  TTM  Test  Set 

2.  Universal  Counter,  Racal  Type  335 

3.  Attenuator,  Marconi  Instruments  Ltd  Type  TF-21S2 
1*.  Oscilloscope,  Gould  Type  CS-3500 

5.  Digital  Thermometer,  Comark  Type  5000,  10  way. 

6.  Oven  with  circulating  fan.  AEV  London  6.6  XW.  500UC  maximum. 
Spectrum  Analyser.  Hewlett-Packard  Type  35  FOA. 

Test  Results 


Pre-heat  test  measurements 

Tape  Track  2 

Read  Amp  Output 
Volts  P-P 


Xapton  A 
Kapton  3 
Mylar  D 
Mylar  E 


3.!*= 

3.20 

3-37 

3>0 


Track  1 

Read  Amp  Output 
Volts  P-P 

3.35 

3.60 

3.97 

3-95 


Post  heat  test  measurements 


Tape 

Track  2 

Track 

U 

Read  Amp  Output  Read  Amp  Output 

Volts  P-F 

Volts 

P-P 

Xapton  A 

c.6 

0.65  ' 

-  0.7 

Kapton  B 

0.1* 

O.U 

Mylar  0 

3-0  -  3.1 

3.57 

Mylar  E 

3.15 

3.60 

Pre-heat 

test  measurements 

Tape 

Track  2 

Track  2 

Track  A 

Track  a 

Read  Amp 

Complete 

Read  Amp 

Complete 

Output 

Cycles 

Output 

Cycles 

Volts  ?-? 

Count 

Volts  P-P 

Count 

Xapton  C 

2.1* 

17  S  5  ?i*o 

2.9 

17-011 

Itylar  P 

3.0 

191955 

■* .  5 

196793 
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Post  heat  test  measurements 


Tape 

Track  2 

Read  Amp 
Output 

Volts  P-P 

Track  2 
Complete 
Cycles 
Count 

Track  a 

Read  Amp 
Output 

Volts  P-P 

Track  i» 
Complete 
Cycles 
Count 

Xapton  C 

1.25 

29i“»l 

1.5 

65362 

Mylar  F 

It. 5 

191920 

5  -  7.5 

196693 

Summary 

Beginning  with  the  3  samples  of  Kapton  recording  tape,  all  3  nad  a 
good  physical  appearance  and  produced  a  clean  signal.  The  signal 
loss  cf  the  sample  heated  at  300  C  was  U$?,  compared  with  51*  and 
09?  on  the  samples  heated  at  IOC  C.  One  sample  heated  at  100°C 
showed  severe  dropouts  and  amplitude  modulation  which  deteriorated 
in  the  last  half  of  the  tape. 

The  3  samples  of  (tylar  tape  again  had  a  good  physical  appearance 
with  a  clean  signal.  There  were  no  severe  dropouts  in  any  of  the 
samples  although  all  3  suffered  from  amplitude  loss  due  to  a  slight 
tape  wgave.  This  was  more  noticeable  on  the  last  tape  sample  heated 
at  llo  C  which  also  suffered  from  severe  layer  to  layer  adhesion  in 
the  last  10?  of  the  tape  pack. 

Conclusion 


On  gll  the  samples  of  Xapjon  and  Mylar  recording  tape,  tested  up  to 
300  C  for  Raptor.,  and  120  C  for  Mylar,  the  recovery  of  data  has  in¬ 
creased  significantly  compared  with  the  previous  tests  covered  in 
Development  report  1305V  DVH9- 
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APPENDIX  K 

THERMAL  ANALYSIS  OF  PROPOSED  SOLID-STATE  AIRCRAFT  CRASH  RECORDER 


I NTRODUCT I  ON 

Norma  I  a i r- Garrett  Limited  (NGL)  has  prepared  a  design  proposal  for  a  solid- 
state  aircraft  crash  recorder.  The  design  has  been  optimized  to  meet  various 
thermal,  shock,  and  impact  requirements. 

Reasonable  assurance  was  required  that  component  temperatures  would  not 
exceed  manufacturer's  recommended  levels  for  recording  data  under  normal  air¬ 
craft  operating  conditions  and  for  maintaining  data  integrity  for  removal  after 
an  aircraft  crash.  This  appendix  describes  the  thermal  analysis  undertaken 
to  estimate  internal  temperature  profiles  for  the  crash  recorder  design  pro¬ 
posal  (shown  in  Ref.  K-1). 

Initial  analysis  indicated  that  it  was  not  possible  to  use  an  inert  insula¬ 
tion  alone  since  the  thickness  required  for  crash  protection  did  not  permit 
adequate  heat  dissipation  during  normal  working.  A  combination  of  passive 
insulation  and  an  external  coating  of  intumescent  material  provided  the  best 
solution.  Recent  experience  with  designs  for  crash  protection,  which  included 
a  survey  of  the  attributes  of  many  insulators,  suggested  that  MIN  K  2000  and 
FIREC  would  be  suitable  passive  and  intumescent  insulations,  respectively. 

The  analysis  described  below  was  based  on  the  thermal  proper+ies  of  these 
substances . 

The  analysis  was  divided  into  two  parts: 

(a)  Derivation  of  the  temperature  levels  inside  the  unit  under  normal 
power  loading  in  the  worst-case  environmental  situation. 

(b)  Transient  analysis  of  the  effects  of  a  flame  test,  which  simulates 
fire  in  the  crash  situation. 

It  was  necessary  to  optimize  the  amounts  of  passive  and  intumescent  insula¬ 
tions  to  meet  the  requirements  for  normal  operation  and  crash  protection. 

THERMAL  CONSTRAINTS 

The  following  information  was  used  as  a  basis  for  the  thermal  analyses: 

(a)  Normal  recording 

(1)  Solid-state  component  operating  temperatures  should  not  exceed 
1 25°C 

(2)  Total  power  to  be  dissipated  is  3.5  w 

(3)  Ambient  temperature  is  90°C 
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(b)  Crash  protection 


(1)  To  ensure  successful  data  retrieval,  solid-state  component 
temperatures  should  not  exceed  150°C 


(2)  In  the  absence  of  detailed  information  that  described  the 
performance  of  the  FIREC  intumescent  coating,  experimentally 
measured  temperature  profiles  were  extracted  from  tests  per¬ 
formed  at  NGL  and  input  to  a  model  of  the  crash  recorder. 

Ref.  K-2  describes  the  fire  test. 

(3)  Soak  at  90°C  prior  to  fire  test  simulation 
THERMAL  MODEL 

Salient  details  have  been  extracted  from  the  design  in  Ref.  K-1  in  order 
to  simplify  the  analysis.  It  should  be  noted  that  assumptions  made  to  ease 
the  mathematical  interpretation  were  calculated  to  err  on  the  side  of  safety. 


HEAT  DISSIPATION 

Figure  K-1  shows  the  analogous  electrical  network  adopted  for  the  heat 
transfer  paths  from  the  internal  case,  which  holds  the  solid-state  components 
to  the  ambient.  The  heat  capacities  of  the  protective  materials  have  been 
included  so  that  a  transient  analysis  may  be  performed.  Table  K-1  lists  the 
resistances  and  capacitances  calculated  for  the  network.  Superimposed  on  the 
margin  are  indications  of  the  thicknesses  of  materials  used  in  the  analysis. 


-2mm- 


-5mm- 


90°C 
AMBIENT 
TEMPERATURE 


A  12693 


Figure  K-1.  Network  for  Heat  Dissipation  Under  Normal  Operating  Conditions 
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TABLE  K-1 


RESISTANCES  AND  CAPACITANCES  FOR  THERMAL  NETWORK 


Component 

Res i stance 

Capac i tance 

Inner  compartment 

1.5 

510 

Inner  case  (steel) 

• 

03 

X 

o 

1 

V/4 

555 

MIN  K  2000 

1 .04 

106 

Outer  case  (steel) 

• 

o 

X 

o 

1 

622 

FIREC 

0.308 

100 

Air  radiation  and 

1 .0 

_ 

convect i on 

The  network  permits  the  derivation  of  temperature  profiles  for  a  number 
of  points  inside  the  unit: 


(a)  A  fictious  point  in  the  center  of  the  unit  where  all  the  solid-state 
components  were  considered  to  be 

(b)  Internal  compartment/inner  steel  case 

(c)  Inner  steel  case/M IN  K  2000  interna!  insulation 

(d)  MIN  K  2000/outer  steel  case 

(e)  Outer  steel  case/FIREC  intumescent 

( f )  Skin 


(g)  Ambient 

Table  K-2  lists  steady-state  temperatures  calculated  at  each  of  the  above 
points  in  an  ambient  temperature  of  90°C  and  a  power  loading  of  3.5  w  in  the 
internal  compartment.  There  was  insufficient  time  to  conclude  a  transient 
ana  lysis. 


The  internal  compartment  temperature  attains  a  steady-state  value  of  105°C 
which  falls  below  the  maximum  specified  for  normal  data  recording  purposes. 


CRASH  PROTECTION 


Figure  K-2  shows  the  network  chosen  to  represent  heat  transfer  in  the 
crash  situation.  Data  from  Ref.  K-2  for  outer  steel  case  temperatures  during 
the  fire  test  (covered  by  a  4.5-rmi  coating  of  FIREC  intumescent)  was  input  to 
the  network  as  an  equivalent  exponential  temperature  increase. 
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TABLE  K-2 


INTERNAL  TEMPERATURES  -  HEAT  DISSIPATION  (3.5  W) 
JNDER  NORMAL  OPERATING  CONDITIONS 


Position  of  Temperature 

Est i mate 

Temperature, 

°C 

Amb i ent 

90.0 

Skin  (FIREC) 

93.5 

FIREC/outer  case 

94.6 

•  Outer  case/M IN  K  2000 

94.6 

MIN  K  2000/ inner  case 

98.3 

Inner  case/ interna  1  comp. 

98.3 

Solid-state  components 

104.5 

•  2mm- 


-5mm- 


CONDUCTION 
THROUGH 
BOARDS  AMD 
STRUCTURE  TO 
INNER  CASE 


— wv 

"1 


C  1 2 


CONDUCTION 
THROUGH 
INNER 
CASE 


R23| 
C23^ 


CONDUCTION 
THROUGH 
MIN  K 
2000 


R34| 

C3^J 


THE  TEMPERATURE  AT  NODE  4  WAS 
DETERMINED  FROM  EMPIRICAL 
RESULTS  OF  A  FIRE  TEST  OR  A 
SIMILAR  STEEL  SHELL  PLUS 
INTUMESCENT  COATING  (REF.  K-2) 


A- 12592 


Figure  K-2.  Network  for  Crash  Protection  Thermal  Analysis 
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The  network  allows  the  estimation  of  temperature  profiles  for  the  follow¬ 
ing  internal  points: 

(a)  A  ficticious  point  in  one  center  of  the  unit  where  all  the  solid- 
state  components  were  considered  to  exist 

(b)  Internal  compartment/ i nner  steel  case 

(c)  Inner  steel  case/M  IN  K  2000 

(d)  MIN  K  2000/'ou+er  steel  case 

cigure  K-3a  shows  time  instances  of  the  temperature  behavior  at  each  of 
the  above  points,  starting  from  90°C  throughout  and  with  an  exponential  rise  in 
outer  case  temperature  to  simulate  the  fire  test.  Table  K-3  lists  the  tempera¬ 
tures  after  10,  20,  and  30  min. 

The  internal  compartment  temperature  reaches  150°C  after  22  min  and 
approaches  190°C  after  30  min. 

CONCLUSIONS 

The  design  proposal  permits  adequate  heat  dissipation  during  normal  data 
recording  conditions — a  power  load  of  3.5  w  and  an  external  ambient  temperature 
of  90 °C.' 

Crash  protection  is  sound  for  22  min  before  the  internal  temperature  is 
estimated  to  reach  150°C. 

REFERENCES 

K-1  .  NGl  Orawing  No.  1444VDES2,  Solid-State  Crash  Recorder,  February  1981. 

K-2.  NGL  Report  No.  1305  V  DVR  12,  Fire  Protection  Test,  September  1980. 
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Figure  K-3.  Results  of  Thermal  Analysis 
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mm 


m.'j  K  2000  (DEG  C)  !  OUT  ST  SHELL  (DEG  C) 


TABU  K-3 


APPENDIX  L 

LIST  OF  U.S.  PERSONNEL  CONTACTED  DURING  CSFDR  STUDY 
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ADARi  Prtnk 


513  255  6104 


AMMOTT  Tom 

ADDERS  Paul  F16  SPO 

BATH  william 

BRADY  Don 

BRILL  Lt.  John 

CAIAPA  Ceaear 


CAIGEK  Bernard 


manufacturing  company 


Structural  Integrity  Branch 
Avionics  Plight  Dynamics  Lcbs 
Structural  Kech.  Div. 

Structural  Integrity  Branch 
Wright  Patterson 

WicroproceEsor  systems  to  obtain 
information  relating  to  Fracture 
mechanics  i.e.  damage  growth 
(contract  award  14th  Kovember) 

613  236  4400 
Leigh  Instruments , 

Carlton  Place 
Ontario. 

Product  Support 

513  255  4606 
bright  Patterson 

232  3847 

Safety  Dept.  Ko  295 
MCAIR 

516  531  3152 

Fairchild  Republic 
AiO  Instrumentation 

5^3.  255  5614 
Wright  TV.  tt  croon 

Engine  diagnostic  system 

6o9  641  8200  Ext.  3320 

Federal  Aviation  Technical  Centre 
Atlantic  City.  L.J. 

Carrying  out  a  study  into  cre.3h 
conditions  for  civil  erf  rcnerrl 
aircraft.  Expects  to  complete 
September  1981 

613  S98  3149 

Flight  Research  Labs.  KAE 
Rational  Receurch  Council 
Ottawa,  Ontario  KI  AOR  6 

F 1 ight  data  recorder  replay 
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CAPUTO  Captain  THEMS 


DICKMAN  Thomas 

DORKEY  Chuck  F15  SPO 

PAGE!!  Scott 

FINGER  John 

CSMIK  Bob  GSPDR  Engineer 

HAUPT  Lt.  Stephen  P16  SPO 
HAYES  Jack  Recorder  Deptt 

HOUSE  Tom 

JAYORE  Dr.  Data  Compression 

X1.IGHT  Venny 


512  925  6001 

Kelly  APB 
San  Antonia 

Engine  Health  Monitoring  Systems 
Back  12th  November 

513  255  5357 
Wright  Patterson  AFB 

Instrumentation  A 10 

513  255  3321 
Wright  Patterson  APB 

213  38o  5557 

International  Society  of  Air  Safety 
Box  20742  LA  LOGO  6 

8© 4  827  1110  Ext.  3681 

Mail  Stop  477 

NASA,  Langly  Research  Centre 
Hampton,  Virginia  23665 

Study  into  methods  of  obtaining 
statistical  data  for  aircraft 
structural  strength  requirements 

513  255  3440 
fright  Patterson  APB 

513  255  4606 
W right  PrtterFon  APB 

301  344  7779 
NASA  Goddard 

804  678  3507 

AVIvADCOM 
Ft.  Eustace 

Black  Hawk  Maintenance  Recorder 

265  553  5607 
FFSC 

Needs  programme 

see  John  Finger 
Responsible  for  recorders  at 
Langley  Research  Centre 


i 
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KUBIAC  Captain  Jim 


513  255  5814 


LERAAS  Melvin  P16  Instrumentation 

LYNCH  Dr*  Tom  D-  ta  Compression 
MAXWELL  Ktrvin 

MAYNARD  Karl  Data  Compression 

Me LEACH  tfnlt 

KILLER  Warner  Date  Compression 
K0IS.U"  Dave 

Parker  John 

PECKHAM  Cyril  ASIP 

RICE  Boh  Data  Compression 

SILER  Bern 

SOUKLl  lilt  F15  Instrumentation 


Wright  Patterson 
Engine  diagnostic  system 

513  255  3440 
Wright  Patterson  APB 

801  344  6445 
( Goddard ) 

301  344  8036 
HAS  A  (Goddard) 

Date  compression  of  Video  signals 
205  453  3171 

Marshal!  Plight  Space  Centre-p 
673  99?  2451 

Dept,  of  Transport,  Ottawa 
Airline  Regulatory  Authority 

301  344  8183  (Goddard) 

"'right  Patterson  APB 

Plight  Regime/Aerodynamics  for  A10 

SS2S  415  965  5225 

NASA  AIMS  Research  Centre 
intensity  of  aircraft  fires 

513  255  4983 
Wright  Patterson  APB 

213  354  ?616 

JLL  NASA  Pasadena  Ca. 

2o5  453  4340 

Marshall  Plight  Spece  Centre 
BP  13,  MPSC,  Alabama  35312 

Evaluation  of  recorders 

513  ?55  3913 
Wright  Patterson  APB 
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WALLACE  Charlie  Pi 5  Maintenance 

WALLACE  Dr.  Gabriel 


WILLIAMS  Dell  Date  Compression 

WOOD  A .  D . 


ZEIJOVIC  Ron 


912  926  2901 

Warner  Robbins  APB 
2c5  453  3777 

Marshall  Plight  Space  Centre 
Branch  chief  for  Bern  Siler 

2o2  755  2370 

OAST  Space  Systems 

613  998  3071 
L’RC  Ottawa 

Plight  Research  Labs. 

Uplands 

213  354  3444 
JPL 
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STUKENBORG  Douglas 


513  255  5814 


TAYLOR  Prank  ‘Plight  Safety 
Director 


Vright  Patterson  APB 
Engine  diagnostic  cystem 

202  472  6066 
ETSB 


THOMAS  Doug 


THOMS Olf  Dr.  R. 0. 


THOR  Wayne 


TYJJDALE  Robert 
VELDMAK  Ray  ASXP 


205  453  3577 
Marshall  PSC 

Data  compression  on  NEEDS  programme 
spectral  imagery,  non  information 
deta  compression 

S04  327  1110  Ext.  3795 

Langley 

Impact  dynamics  research  facility 
provided  details  of  shock  to  be 
expected  in  crash 

Wright  Fatterrcn  AFB 

Stability  Augmentation  system  A10 

Wright  Patterson  APB 

Plight  Regime/Aerodynamics  for  A10 

Wright  Patterson  APB  513  255  4S88 
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A 


Dr . 

Carol  Roberts 

NTSB 

(202) 

472-6131 

Pau  1 

1  T  urner 

NTSB 

Dan 

Watters 

Naval  Systems  Engineering  Test 
Directorate,  NATC 

(301) 

863-4673 

Bi  1 

1  Red 

Naval  Air  Station,  North  Island 

(714) 

437-5631 

Ray  Rank 

NAVAIR 

(202) 

692-0751 

J  im 

Vreeland 

Navy  Safety  Control,  Norfolk 

(804) 

444-1521 

Lt. 

John  Br i  1  1 

Wright  Patterson  Engine  Performance 
Mon i tor i ng 

(513) 

255-3279 

Dave  Godfried 

Leigh  Instruments,  North  Island 

(714) 

437-5631 

Ken 

Fields 

Director,  Navair  Safety  Office 

(202) 

692-1236 

Bi  1 

1  Currie 

Wright  Patterson  Engine  Health 

(513) 

255-3279 

Mon  i  tor  i  ng 
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APPENDIX  M 

ANALYSIS  OF  USAF  AIRCRAFT  CRASHES 
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This  report  present*  the  analysis  performed  an  incident  reports  from 
Norton  USA?  training  base.  Tbs  reports  were  categorised  and  numerically 
coded  to  allow  cccputerieed  analysis. 

It  was  found  that  in  over  half  of  the  Incidents  resulting  in  loss  of 
aircraft  the  findings  of  tbs  crash  cennittee  were  inconclusive 
representing  a  significant  loss  of  aircraft  and  personnel. 

It  has  been  shown  that  of  the  incidents  that  had  conclusive  findings  a 
high  proportion  vers  due  to  failure  in  areas,  such  as  the  engine,  which 
lend  themselves  to  data  collection.  This  suggests  that  in  a  large 
proportion  of  the  incidents  involving  aircraft  and  personnel  loss,  a 
data  recorder  would  have  produced  a  positive  effect  on  the  incident 
findings. 
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Section  He.  Title 

1  rNTSomjcncB 

Structure  of  Baport 

2  DESCBimON  OP  AHLLTSXS 

Classification 

Cause  of  Incident 
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This  report  ooncerna  a  surety  of  aircraft  incidents  sod  crashes, 
undertaken  to  aaaiat  in  the  identification  of  areaa  and  cauaee  of 
failure  on  military  aircraft. 

The  incident  reports  summarise  the  findings  of  crash  committees 
at  the  Sort  on  las*  over  the  period  from  1976  to  date  and 

cover  over  600  incidents. 

The  reports  have  been  broken  down  into  categories  which  allow  an 
incident  to  be  claeaified  uniquely  and  facilitates  a  numerical 
description  of  the  findings.  The  categorised  summarise  are  rben 
used  as  input  data  for  computerised  statistical  analysis. 

I  detailed  description  of  the  main  end  sub  categories  is  given 
in  Section  2  with  the  results  of  the  statistical  analysis  in 
Section  3* 
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2. 


REPORT  CATEGORIES 

The  first  30  reports  were  reviewed  to  give  as  indication  of  the 
categories  necessary  to  correctly  describe  an  incident.  The 
main  categories  deecrlbet- 

a)  Incident  Classification 

b)  Cause  of  Incident 

c)  Area(s)  of  failure(s)  on  the  aircraft 

d)  Results  of  the  failure(s) 

The  following  sections  describe  the  sub  categories  of  the  above, 
which  were  then  coded  for  use  by  the  computer  programs. 

2.1  Classification 

The  following  categories  classify  an  incident  uniquely: - 

SflSlffig  Tvoe  of  Entry 

Incident  Number  9  figure  integer 

Aircraft  Type  5  figure  alphanumeric 

Accident  Class  0  or  1 

Injury  Class  0  or  1 

Phase  of  Operation  0,  1,  2  or  3 

Fags  Number  3  figure  integer 

There  are  4  alternatives  in  the  phase  of  operation  category:- 

0  «  Parked 

1  •  Take  off 

2  •  Cruise 

3  a  landing 

Taxiing  is  considered  to  be  mode  1  or  3  depending  on  prior 
circumstances.  In  the  accident  class  category,  a  1  or  0 
corresponds  to  TJ.S.A.P.  Class  A  or  B  accidents.  Class  A 
accidents  imply  serious  damage  or  loss  of  aircraft  whereas  Claes  B 
accidents  suggest  repairable  damage.  Injury  Class  1  corresponds 
to  serious  injuries  whilst  Class  0  refers  to  slight  or  no  injuries. 
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2.2 


Cause  of  Incident 

It  should  bs  noted  that,  in  this  and  following  sections,  the 
categories  are  not  unique,  i.e.  more  than  one  cause  can  occur 
In  one  Incident. 

The  following  categories  axe  used  to  code  the  cause  of  failure i 
Category  ?f  Egtat 


Pilot  Error 

0, 

1 

Control  Equipment  Failure 

0 

or 

Environmental  Factors 

0 

or 

Material  Failurea 

0 

or 

Other  known  Causes 

0 

or 

Unknown  Causes 

0 

or 

0  or  1  corresponds  to 

HO 

or 

Description 

a)  Pilot  Error 

: 

b)  Control  Equipment  Failure  > 


c)  Environmental  Factors  t 


or  2 
1 
1 
1 
1 
1 

fES 

There  are  3  alternatives 
0,  1  or  2  which  corresponds 
to  no  pilot  error,  confirmed 
pilot  error  and  the  failure 
was  assigned  to  pilot  error 
but  the  report  findings 
were  inconclusive 

'feo  or  Ho;  This  category 
includes  instrumentation 
malfunction  (e.g.  failure 
of  radar) 

Tea  or  Ho;  This  is  <— 

Slid  Damage  but  includes 
ice  damage  and  other  effects 
of  the  weather  (e.g. lightning) 


Fore 
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d)  Material  Failure 


:  Yes  or  So;  Failure  due  to 

overstresaed  members, 
fatigue  and  corrosion.  Also 
includes  failure  of  part  due 
to  unsatisfactory 
maintenance. 

e)  Other  known  Causes  :  Yea  or  So;  This  category 

consists  in  the  main,  of 
foreign  object  damage  (F.O.D.) 
to  the  aircraft,  especially 
the  engine. 

f)  Unknown  Cause  :  Yes  or  Bo;  This  category  is 

used  when  the  report  committee 
could  sot  ascertain  the  cause 
of  an  incident. 


Areas  of  Aircraft 

The  categories  in  this  section  present  the  area(s)  of  the  aircraft 
where  the  failure(a)  occurred. 


Tyoe  of  Entry 


BngtTie  0  or  1 

landing  Gear  0  or  1 

Cockpit  0  or  1 

Control  Surfaces  0  or  1 

Other  Areas  0  or  1 


Some  of  those  categories  can  bs  easily  interpreted  and  only 
require  TES  or  SO  (1  or  0)  answers  but  the  categories  below 
require  more  explanation. 


Fags 
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a)  Cockpit 


2.1* 


t)  Control  Surfaces 


c)  Other  Areas 


i  Tea  or  Bo;  When  a  pilot  error 
occura  the  area  of  failure  is 
assigned  to  he  the  cockpit. 

The  oookpit  also  includes 
instrumentation  failure. 

t  Tee  or  Bo;  This  area  includes 
wing  tips,  ailerons,  flaps, 
rudders,  etc. 

:  Tea  or  Bo;  This  area  consists 

of  fuselage  and  attached 
missiles. 


Besult  of  Failure 

Category  Tyne  of  Entry 


Ejection  0  or  1 
Onboard  Tire  0  or  1 
Ho.  of  Aircraft  Lost  Integer 
Ho.  of  Personnel  Lost  Integer 


a)  Fire 


b)  Bo.  of  Personnel  Lost 


t  Tea  or  No;  This  category  does 
not  include  impact  with  ground, 
water  or  buildings. 

i  IOTEGE8;  Personnel  lost 
Implies  fatality  or  a  major 
injury  which  would  result  in 
permanent  injury  and/or 
grounding. 
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Table  1  preaanta  the  Initial  calculations  performed  on  the  data 
and  shows  the  variation  of  the  categories  with  phase  of  operation. 

Hie  right  column  of  Table  1  shows  the  percentage  of  all 
incidents  for  each  category.  These  flgurea  are  shewn  In  Figure  1 
as  bar  charts,  fief erring  to  Figure  1  the  following  statements  can 
be  made. 

a)  33 %  of  incidents  resulted  in  loss  of  aircraft 

b)  22%  of  incident a  resulted  In  loss  of  personnel 

Table  1  shows  the  number  of  personnel  lost  is  262,  which  is 
significantly  higher  than  the  number  of  incidents  whan  personnel 
were  lost,  resulting  in  the  probability  of  lose  of  life  in  an 
incident  being  0.32. 

In  Figure  1(b)  the  section  of  the  chart  labelled  "inconclusive 
findings"  is  the  combination  of  Pilot  Error  (2),  Control  Equipment 
Failure  and  Unknown  cause.  This  represents  the  percentage  of  cases, 
when  the  findings  of  the  crash  committee  ware  considered  inconclusive, 
and,  whan  a  data  recorder  would  have  produced  a  positive  effect  cn 
the  report  findings. 

o)  32%  of  all  incident  reports  were  inconclusive 

In  Figure  1(b)  "other  causes"  is  the  dominant  single  category.  This 
mainly  consists  of  foreign  object  damage  which  results  in  minor, 
repairable  damage  to  the  aircraft,  particularly  the  engine.  This  is 
shown  in  Figure  1(c)  where  the  engine  area  dominates  the  other 
categories. 

It  is  rf  particular  interest  to  look  at  the  results  when  the  plana 
is  In  operation,  l.e.  when  it  is  not  in  the  parked  mode.  Figure  2 
analyses  the  results  of  Table  1  when  the  cases  in  which  the  aircraft 
la  parked  ass  not  considered.  This  reduces  the  population  size  to 
677  from  818  and  has  the  effect  of  reducing  the  domination  of  the 
engine,  a a  shown  in  Figure  2(c),  and  increases  the  proportion  of 
incident  reports  with  inconoluaive  findings.  These  results  occur 
because  of  tha  high  number  of  engine  foreign  object  damage  incidents 
discovered  during  a  pre-flight  and  poet-flight  inspections. 
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Statements  a),  b)  and  c)  now  bacon,  respectively: 

d)  i*6%  of  Incidents  (excluding  parked)  resulted  Is 
loaa  of  aircraft 

a)  26%  of  Incidents  (excluding  parked)  resulted  in 
loaa  of  personnel 

f)  35%  of  Incident  reports  (excluding  parked)  were 
Inconclusive. 

The  results  of  analysis  when  only  Class  A  accidents  ire  considered 
are  presented  In  Tables  2  and  3  and  shown  as  bar  charts  In  Figures 
3  and  k. 

The  section  labelled  "  Inconclusive  findings"  in  Figure  3  1*  as 
previously  described  and  shows  that  53%  of  the  total  number  of 
aircraft  lost  gave  rise  to  crash  reports  with  Inconclusive  findings. 

In  Figure  U  the  oockpit  area,  containing  all  the  pilot  error 
incidents,  la  the  moat  significant  category  containing  58%  of  all 
class  A  accidents.  It  must  be  noted  that  the  crash  reports  arise 
from  a  training  base,  so  aey  present  a  higher  proportion  of  pilot 
error  incidents  than  would  normally  be  expected. 

On  further  analysis  of  Class  A  cases  it  was  found  that  6.2%  of  all 
aircraft  lest  crashed  In  the  sea. 

A  number  of  miscellaneous  crosa-referenoes  were  performed  from  which 
the  significant  results  are 

a)  11.6%  of  all  incidents  were  due  to  material  failure 
in  the  angina 

b)  U«3%  of  all  incidants  ware  due  to  material  failures 
in  the  landing  gear 
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conclusions 

In  over  half  of  the  cum  involving  loss  of  aircraft  there  was 
insufficient  evidence  to  support  the  formulation  of  a  conclusive 
finding.  Included  in  this  category  are  the  following  types  of 
accidents 

a)  accidents  attributed  in  port  to  pilot  error  but 
where  the  reason  for  the  pilots  Inability  to  control 
the  aircraft  was  not  clear. 

b)  control  systems  failure  where  although  the  area  was 
identified  the  cause  was  unknown. 

c)  accidents  which  occurred  for  a  completely  unknown 


These  groups  form  the  sample  of  Class  i  accidents  most  likely  to 
have  benefited  from  the  recording  of  aircraft  conditions.  It  is 
not  possible,  from  these  statistics,  to  stats  definitely  that  the 
presence  of  a  data  recorder  would  have  prevented  further  accidents, 
but  of  the  report  a  with  conclusive  findings  a  high  proportion  of 
failures  occurred  in  areas  which  lend  themselves  to  data  collection. 
This  suggests  that  in  a  large  number  of  the  Inconclusive  accidents, 
involving  aircraft  and  personnel  loss,  a  data  recorder  would  have 
produced  a  positive  effect  on  the  report  findings. 
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Causa  of  Failure 

No. of  Aircraft  Lost 

Pilot  Srror  (l) 

100 

Pilot  Srror  (2) 

70 

Control  Equipment 
Pailura 

58 

Environmental 

Factors 

18 

Material  Failures 

55 

Other  Known 

Causes 

1 

39  ! 

Unknown  Causae 

70 

\ - - - - - 

tabu:  2 

Areas  of  Aircraft 

1  No.  of  Cases 

Engine 

i  7U 

landing  Gear 

!  i? 

Cookpit 

180 

Control  Surfaces 

21 

Other  Areas 

39 

ost  lire  raft  of  all  Incident 


30.7 
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mhckam  i  tvt 


CASES 

PtNCtM 

PARKED 

« 

2*. ISA 

take  off 

35 

10.76V 

CRUISE 

lax 

SO. 462 

LANOImG 

VG 

30.462 

PILOT  1 

52 

16.000 

PILOT  2 

VG 

30.462 

CON. EQUIP 

il 

G.53a 

ENVIRONMENT 

22 

a.  76G 

material 

*5 

2U.OOO 

OTHER 

12S 

3a#  76  V 

UNKNOWN 

W 

11.6V2 

ENGINE 

17  v 

55.077 

LANDING  CM 

2* 

a.ooo 

COCKPT 

7  7 

23.6V2 

CONT .SUL 

10 

3.077 

OTHER 

•  7 

14.462 

EJECTION 

54 

lB.alS 

FIRE 

Jo 

G.231 

ACR.LOST 

67 

26.769 

LIVES  LOST 

56 

2a. 769 

NO.  ACR.LOST 

G3 

NO.  Lives  LUS11U3 

TOTAL  HUrtBE*  OF  This  TYPE- 


325 


aircraft  type  fois 


CASES 

PERCENT 

PARKED 

16 

17.562 

TAKE  OFF 

• 

6.7VI 

CRUISE 

S3 

56.242 

LANOING 

2« 

26.374 

PIL0T1 

11 

12.066 

PILOT  2 

24 

26.37m 

CON. EQUIP 

11 

12.u6b 

ENVIRONMENT 

11 

1 2.066 

MATERIAL 

12 

13.167 

other 

36 

41.756 

UNKNOHN 

IV 

20.679 

ENGINE 

»v 

53.646 

LANOING  SR 

5 

5.495 

COCKPT 

20  . 

21.976 

C0NT.SUR 

5 

5.495 

OTHER 

15 

I  a. 464 

E  JECT.IUU 

13 

1 4.266 

FIRE 

7 

7 . 6  V2 

ACR.LOST 

24 

26.374 

LIVES  LOST 

6 

2 6.374 

NO.  ACH.LUST 

25 

NO.  LIVES  LUal  9 

TOTAL  NUHHEH 

OF  lni3 

T  Yrt- 
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AIRCRAFT  TYPE  Fin 


CASES 

PEkCE'.I 

PARKED 

lb 

23.il 7  7 

TAKE  OFF 

b 

7. b92 

CRUISE 

«t 

52.56 tt 

LANDING 

35 

66.672 

PILOT  1 

It 

16.103 

PILOT  2 

35 

*4.672 

CON. EQUIP 

H 

10.25o 

ENVIRONMENT 

II 

16.103 

material 

17 

21.795 

OTHER 

» 

32.051 

UNKNOWN 

11 

1 6. I 0 A 

ENGINE 

A  1 

52.564 

LANOING  GR 

7 

6.976 

COCKPT 

22 

26.205 

CONT.SUR 

tt 

5.126 

OTHER 

8 

10.256 

ejection 

17 

21.795 

FIRE 

13 

lb.be? 

ACR.LOST 

31 

39.764 

LIVES  LOST 

2t> 

39.744 

NO.  ACR.LOST 

33 

NO.  LIVES  LOST  37 

TOTAL  NUMBER 

of  this 

TYPE- 

AIRCRAFT  TYPE 

T  036 

CASES 

PERCENT 

PARKEO 

2 

2.740 

TAKE  OFF 

14 

19.176 

CRUISE 

33 

65.205 

LANOING 

32 

43.93b 

PIL0T1 

23 

31.507 

PILOT  2 

32 

43.b3b 

CON. EQUIP 

12 

lb.43n 

ENVIRONMEM 

13 

1 7  »8vo 

MATERIAL 

15 

20.546 

other 

10 

I3.b95 

UNKNOWN 

7 

9 . 5b9 

ENGINE 

29 

39. 728 

LANOING  GN 

6 

10.959 

COCKPT 

25 

34.247 

CONT.SUR 

b 

6.219 

OTHER 

4 

5.479 

EJECTION 

In 

24,b5b 

FIRE 

3 

4  «  l  1  U 

AC«. LOST 

25 

34.2—7 

LIVES  LOST 

19 

34.247 

NO.  ACK.LObT 

2b 

NO.  LIVES  LUST  27 

total  nuhreo 

UP  ThTS 

TYPE- 
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AIRCRAFT  TtHt  *00/ 


CASES 

PERCENT 

pakkEO 

S 

k.kie 

TAKE  OFF 

4 

9.091 

CRUISE 

33 

75.000 

landing 

24 

54.545 

PILOT  1 

11 

25.000 

PILOT  2 

24 

54.545 

CON. EQUIP 

6 

13. 63k 

ENVIRONMENT 

1 

2.273 

MATERIAL 

9- 

2v.455 

OTHER 

1 1 

25.0u0 

UNKNOWN 

5 

11.3S4 

ENGINE 

lk 

41),  904 

LANOING  GR 

3 

6.816 

COCKPT 

23 

52.273 

CONT .SUN 

0 

.000 

OTHER 

4 

9.091 

EJECTION 

22 

50.000 

FIRE 

1 

2.273 

ACR.LOST 

32 

72.727 

LIVES  LOST 

21/ 

72.727 

NO.  ACR.LOST 

33 

NO.  LIVES  LUST  23 

TOTAL  NUM6ER 

uF  this 

TYPE- 

aircraft  type 

AO  1 0 

CASES 

PERCENT 

PARKEO 

5 

12.500 

TAKE  OFF 

0 

.000 

CRUISE 

30 

75.000 

LANDING 

13 

32.500 

PILOTl 

9 

22.500 

PILOT  2 

13 

32.500 

CON. EQUIP 

7 

17.500 

ENVIRONMENT 

b 

15.000 

material 

A 

20.000 

OTHER 

13 

32.500 

UNKNOWN 

6 

15.000 

engine 

17 

42.500 

LANOING  GR 

n 

.000 

COCKPT 

12 

30.0oo 

CONT. SUM 

2 

5.000 

OTHER 

10 

25.00o 

ejection 

10 

25.00u 

FIRE 

6 

15.000 

ACR.LOST 

17 

42.500 

LIVES  LOST 

11 

42.500 

NO.  ACR.LU5! 

17 

NO.  LIVES  LUST  11 

TOTAL  NU-OitR 

OF  ThIJ 

TYPE- 

ippwdjjc 

He* 
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AlKCKAr  1  TYRE  Mud 


CASES 

PERCt'.l 

PARKED 

2 

S.  I2e 

TAKE  OFF 

5 

12.021 

CRUISE 

2<t 

61.636 

LANDING 

lb 

4 1 . b2b 

PILOT  1 

10 

2S.041 

PILOT  2 

lb 

41.02b 

CON. EQUIP 

5 

12.021 

ENVIRONMENT 

5 

12.021 

MATERIAL 

12 

3b.7b9 

OTHER 

lb 

2S.041 

unknown 

9 

23.077 

ENGINE 

10  - 

25.641 

LANDING  GK 

a 

20.513 

COCKPT 

13 

33.333 

CONT.SUN 

1 

2.564 

OTHER 

9 

23.07/ 

EJECTION 

6 

20.S13 

FIRE 

s 

12.021 

ACR.LOST 

IS 

30.462 

LIVES  LOST 

7 

3n. 462 

NO.  ACR.LUST 

IS 

NO.  LIVES  LOST  6 

TOTAL  number 

OF  1  HI S 

TYRE- 

AIRCRAFT  TYPE 

FI  05 

CASES 

PERCENT 

PARKED 

2 

S.SS6 

TAKE  off 

4 

11.111 

CRUISE 

22 

61.111 

LANOING 

lb 

27,776 

PILOT! 

S 

13.609 

PILOT  2 

10 

27.776 

CON. EQUIP 

A 

22.222 

ENVIRONMENT 

1 

2.77b 

MATERIAL 

10 

27.776 

OTHER 

6 

lb. 667 

UNKNOWN 

14 

36.669 

ENGINE 

14 

36.B64 

LANOING  GR 

4 

>1.111 

COCKPT 

0 

22.222 

CONT.SUR 

4 

11.111 

OTHER 

0 

22.222 

EJECTION 

14 

52.776 

FIRE 

0 

22.222 

ACR.LOST 

2e 

72.222 

LIVES  LUST 

lb 

72.222 

NO.  ACR.LUST 

26 

NO.  LIVES  LUST  11 

TOTAL  NUMBER 

uf  This  t 

IPt- 
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CASES 

PERCE  *T 

PARKED 

2 

9.091 

TAKE  OFF 

1 

4. S«S 

CRUISE 

IS 

88.182 

LANOInG 

6 

3b. 384 

PILOT! 

!  1 

50.000 

PILUT  2 

B 

38.384 

CON. EQUIP 

0 

.000 

ENVIRONMENT 

4 

IF. 182 

material 

S 

27.273 

OTHER 

S 

2?. 727 

UNKNOWN 

2 

9.091 

ENGINE 

9 

40.909 

LANDING  GR 

2 

4.091 

COCKPT 

8 

38.384 

CONT.SUR 

2 

9.091 

OTHER 

3 

.  13.838 

EJECTION 

10 

45 . ASS 

FIRE 

2 

9.091 

ACR.LUSI 

14 

63.836 

LIVES  LOST 

a 

63.636 

NO.  ACR .LOST 

IS 

NO.  LIVES  LOST  9 

TOTAL  NUMBER  Of  IMIS  ITPE- 


aircraft  TYPE 

F  005 

CASES 

PERCENT 

PARKED 

0 

.000 

TAKE  OFF 

4 

23.529 

CRUISE 

11 

64.708 

LANOInG 

6 

47.059 

PILOT  1 

S 

29.412 

PILOT  2 

8 

47.054 

CON. EQUIP 

u 

.OOP 

ENVIRONMENT 

u 

.POO 

MATERIAL 

5 

29.412 

OTHER 

6 

35.294 

unknOnn 

2 

11.765 

engine 

5 

2n. 4U 

LANOING  GR 

1 

5.862 

COCKPT 

8  ' 

4F.054 

CONT.SUR 

0 

.boo 

OTHER 

3 

17.647 

EJECUON 

3 

17.647 

FIRt 

2 

11.765 

ACR.LUSI 

9 

52.941 

LIVES  LOST 

5 

52.941 

NO.  acr.lost 

U> 

NO.  LIVES  LOST  a 

TOTAL  MUFafcx 

OF  1»1S 

1  Yl  E- 

AMCKARCH  MANUFACTURING  COMPANY 


*JkCK*FT  T*Pt 


P ARKEO 
TAKE  Of* 
CRUISE 
LANDING 
PILOT  | 

PILOT  2 

cos. equip 

ENVIRONMENT 

material 

other 

unknown 

engine 

LANDING  GR 

COCKPT 

CONT.SUR 

OTHER 

EJECTION 

FIRE 

*CR. LOST 
LIVES  LOST 
N0*  ACR.LOST 
NO.  LIVES  LOSI 

total  number  of 


CASES 

0 


3 

5 

8 

8 

b 

U 

t 

3 

3 
2 
0- 
0 
0 
0 
2 

4 

3 

6 

2 

b 

2 

THIS 


PtK'CEi.l 
.00(1 
21. REV 
3S.no 
ST. 103 

ST. 103 

ST. 103 
•  ooo 

T  .103 
21 .02* 
21.02V 
lo.2Nb 
2b.il l 
.000 
ST. 103 
.000 
1 0.28b 
2b. ST  1 
21.029 
5T.I03 
S/. 103 


1  TPE- 


AIRCRAFT  TYPE  Floi 


PARKCO 
TAKE  OFF 
CRUISE 
LANDING 
PlLOTl 
PILOT  2 
CON. EQUIP 
ENVIRONMENT 
MATERIAL 
OTHER 
UNKNOWN 

ENGINE 
LANOING  GK 
COCKPT 
cont . sun 
other 
ejection 
FIRE  ’ 

ACR.LOST 
LIVES  LOST 
MO.  ACR.LOST 
NO.  LIVES  LOST 
TOTAl  number  u* 


CASES 

3 


9 

o 

0 

3 

2 

1 

2 

2 

S  v 
0 
3 
2 
1 
S 
b 
5 
A 

this 


PERCEM 

2S.PVV 

2b.Gov 

2 b.Out 
Tb.Ovu 
6.333 
7b. 000 
33.333 
•  GOO 
2b.0oC 
16.667 
P.333 
16.067 
1 6.6b  7 
01.667 
.OvO 
i  b  .  ii  0  u 
16,641 

b.J  33 

01.667 

01.667 


T  TP*. 


If 
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A JhCK»F 1 

Type 

Mils 

CASES 

PEKCt  4l 

PARKED 

0 

.POG 

TAKE  OFF 

t 

12.500 

CRUISE 

5 

62.500 

LANOING 

41 

50.000 

PILOT  1 

1 

12.500 

PILOT  2 

4 

50.000 

CON. EQUIP 

2 

25.000 

ENVIRONMENT 

0 

.000 

MATERIAL 

2 

25.000 

OTHER 

t 

12.500 

UNKNOWN 

3. 

37.500 

ENGINE 

6 

75.000 

LANDING  6k. 

1 

12.500 

COCKP1 

t 

12.5oo 

CONT.SUk 

t 

12.500 

other 

1 

12.5u0 

ejection 

4 

50.000 

FIRE 

1 

12. SOU 

ACR.LOS1 

S 

62.500 

LIVES  LOST 

0 

62.500 

NO.  ACR.LOST 

5 

WO.  LIVES  LOST 

u 

TOTAL  number  OF 

this 

1  tPE- 

AIRCRAFT  TYPE  F10« 


CASES 

percent 

PARKED 

1 

12.500 

TAKE  OFF 

0 

.  ooo 

CRUISE 

6 

75.000 

LANDING 

1 

12.500 

PIL0T1 

0 

.000 

PILOT  2 

1 

12.50o 

CON. EQUIP 

1 

12.500 

ENVIRONMENl 

1 

12.500 

MATERIAL 

1 

12.500 

OTHER 

2 

25.00O 

UNKNOWN 

2 

25.000 

ENGINE 

5. 

62.500 

L AND  1 NG  GM 

0 

.000 

C0CKP7 

0 

.000 

CONT.SUR 

2 

25.000 

OTHER 

1 

12.500 

EJECTION 

6 

75.000 

FIRE 

0 

.OOo 

ACR.LOST 

7 

67.500 

LIVES  LOST 

t 

A7,5oo 

NO.  ACR.LOST 

7 

NO,  LIVES  LUST 

l 

TOTAL  .»UM8tW 

OF 

this 

IYPE- 
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1 


aIhcwaf  1 

T  YPt 

Al>37 

CASES 

PfcxCt.ol 

parked 

V 

.OOO 

TAKE  OFF 

0 

.  OOo 

CRUISE 

S 

loo. ooo 

LANDING 

0 

.000 

PILOT  1 

3 

bO.OOO 

PILOT  2 

0 

.000 

CON. EQUIP. 

0 

.000 

ENVIRONMENT 

0 

.000 

MATERIAL 

0 

.ooo 

OTHEH 

2 

40.000 

UNKNOWN 

1 

2G.0O0 

ENGINE 

2 

40.000 

LANOING  GR 

0 

.000 

COCKPT 

3 

B0.000 

CONT .SUN 

0 

.000 

OTHER 

0 

.000 

EJECTION 

1 

20. 000 

FIRE 

0 

.  OOo 

ACR . LUST 

3 

bO.OoO 

LIVES  LOS1 

3 

oO.OOo 

NO.  ACR. LOST 

NO.  LlVbS  LUST 
TOTAL  NUMBER  OF 

3 

S 

this  i 

YPE- 

A IRCRAF 1 

I  TYPE 

F  1 02 

CASES 

PERCENT 

Parked 

0 

.000 

take  off 

0 

.000 

CRUISE 

1 

SO. 000 

LANOING 

1 

SO.  000 

PILOT  1 

0 

.000 

PILOT  2 

1 

So.OOt) 

CON. EQUIP 

0 

.000 

ENVIRONMENT 

0 

.000 

MATERIAL 

l 

So.oOo 

OTHER 

0 

.ooo 

UNKNOHn 

1 

SO.OOO 

engine 

0 

.uOo 

LANOING  GR 

0 

•  ooo 

COCKPT 

I  ' 

SO.OOO 

CONT.SUR 

I 

SO. 00" 

OTHER 

l 

SO.OOO 

EJECT  I  UN 

1 

SO.OOO 

FIRE 

1 

SU.GOt. 

ACR. LUST 

2 

loo.ooo 

LIVES  LUS1 

0 

1  G  v>  .  «  •  0  U 

NO.  ACR. LOST 

2 

NO.  LIVES  LUST 

0 

TOTAL  NUMoER  OF 

T  H 1  a 

T  fhE- 
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